PT-2019-5509 · Linux+5 · Linux Kernel+5
Huangwen
·
Publicado
2019-08-28
·
Atualizado
2023-07-12
·
CVE-2019-14816
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.3
Description
The issue is related to a heap-based buffer overflow in the Marvell Wi-Fi chip driver of the Linux kernel. This allows local users to cause a denial of service, resulting in a system crash, or possibly execute arbitrary code. The vulnerability is associated with errors in the
mwifiex update vs ie() function, which can be exploited to achieve these outcomes.Recommendations
For Linux kernel versions prior to 5.3, consider disabling the Marvell Wi-Fi chip driver as a temporary workaround until a patch is available. Restrict access to the vulnerable
mwifiex update vs ie() function to minimize the risk of exploitation. Update to version 5.3 or later to resolve the issue.Exploit
Correção
DoS
Buffer Overflow
Memory Corruption
Heap Based Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu