vulnerability

Oracle Linux: CVE-2020-12654: ELSA-2020-3010: kernel security, bug fix, and enhancement update (IMPORTANT) (Multiple Advisories)

Severity
4
CVSS
(AV:A/AC:H/Au:N/C:P/I:P/A:P)
Published
Jan 27, 2020
Added
Jul 22, 2020
Modified
Dec 3, 2025

Description

An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591.
A flaw was found in the Linux kernel. The Marvell mwifiex driver allows a remote WiFi access point to trigger a heap-based memory buffer overflow due to an incorrect memcpy operation. The highest threat from this vulnerability is to data integrity and system availability.

Solutions

oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.