PT-2020-3069 · Linux+4 · Linux Kernel+4
Published
2020-01-27
·
Updated
2022-04-26
·
CVE-2020-12653
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.5.4
Description
The issue is related to the
mwifiex cmd append vsie tlv() function in the Marvell WiFi driver of the Linux kernel, which allows local users to gain privileges or cause a denial of service due to an incorrect memcpy and buffer overflow. This is caused by improper input validation.Recommendations
For versions prior to 5.5.4, update to version 5.5.4 or later to resolve the issue. As a temporary workaround, consider disabling the
mwifiex cmd append vsie tlv() function until a patch is available.Fix
DoS
Improper Privilege Management
Memory Corruption
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Linux Kernel
Red Hat
Suse