PT-2019-5509 · Linux+5 · Linux Kernel+5
Huangwen
·
Published
2019-08-28
·
Updated
2023-07-12
·
CVE-2019-14816
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.3
Description
The issue is related to a heap-based buffer overflow in the Marvell Wi-Fi chip driver of the Linux kernel. This allows local users to cause a denial of service, resulting in a system crash, or possibly execute arbitrary code. The vulnerability is associated with errors in the
mwifiex update vs ie() function, which can be exploited to achieve these outcomes.Recommendations
For Linux kernel versions prior to 5.3, consider disabling the Marvell Wi-Fi chip driver as a temporary workaround until a patch is available. Restrict access to the vulnerable
mwifiex update vs ie() function to minimize the risk of exploitation. Update to version 5.3 or later to resolve the issue.Exploit
Fix
DoS
Buffer Overflow
Memory Corruption
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu