CVE-2019-14815: High severity Linux Linux kernel vulnerability
A vulnerability found in the Linux kernel's WMM implementation for Marvell WiFi-based hardware (mwifiex) could lead to a denial of service or allow arbitrary code execution. For this flaw to be executed, the attacker must be both local and privileged. There is no mitigation to this flaw. A patch has been provided to remediate this flaw.
Other sources
A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiexsetwmmparams() function of Marvell Wifi Driver.
— Ubuntu
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:3.10.0-1127.rt56.1093.el7 - Upgrade
Upgrade
redhat/kernel-altto a version that resolves this vulnerability.Fixed in 0:4.14.0-115.17.1.el7a - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-1127.el7 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-147.5.1.rt24.98.el8_1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-147.5.1.el8_1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2019-14815?
CVE-2019-14815 is classified as a high-severity vulnerability due to its potential to cause denial of service or arbitrary code execution.
How can I patch CVE-2019-14815?
To mitigate CVE-2019-14815, apply the appropriate kernel updates provided by Red Hat for affected versions.
What systems are affected by CVE-2019-14815?
CVE-2019-14815 affects various Linux kernel versions, particularly those provided by Red Hat, including kernel-rt and kernel-alt packages.
Can CVE-2019-14815 be exploited remotely?
No, CVE-2019-14815 requires local and privileged access for exploitation.
Is there any workaround for CVE-2019-14815?
There is no known workaround for CVE-2019-14815; the only solution is to apply the appropriate patches.