First published: Wed Aug 21 2019(Updated: )
A vulnerability was found in the Linux kernel's Marvell WiFi chip driver. Where, while parsing vendor-specific informational attributes, an attacker on the same WiFi physical network segment could cause a system crash, resulting in a denial of service, or potentially execute arbitrary code. This flaw affects the network interface at the most basic level meaning the attacker only needs to affiliate with the same network device as the vulnerable system to create an attack path.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/kernel-rt | <0:3.10.0-1062.12.1.rt56.1042.el7 | 0:3.10.0-1062.12.1.rt56.1042.el7 |
redhat/kernel-alt | <0:4.14.0-115.17.1.el7a | 0:4.14.0-115.17.1.el7a |
redhat/kernel | <0:3.10.0-1062.12.1.el7 | 0:3.10.0-1062.12.1.el7 |
redhat/kernel | <0:3.10.0-327.85.1.el7 | 0:3.10.0-327.85.1.el7 |
redhat/kernel | <0:3.10.0-514.73.1.el7 | 0:3.10.0-514.73.1.el7 |
redhat/kernel | <0:3.10.0-693.65.1.el7 | 0:3.10.0-693.65.1.el7 |
redhat/kernel | <0:3.10.0-862.51.1.el7 | 0:3.10.0-862.51.1.el7 |
redhat/kernel | <0:3.10.0-957.46.1.el7 | 0:3.10.0-957.46.1.el7 |
redhat/kernel-rt | <0:4.18.0-147.5.1.rt24.98.el8_1 | 0:4.18.0-147.5.1.rt24.98.el8_1 |
redhat/kernel | <0:4.18.0-147.5.1.el8_1 | 0:4.18.0-147.5.1.el8_1 |
redhat/kernel | <0:4.18.0-80.15.1.el8_0 | 0:4.18.0-80.15.1.el8_0 |
redhat/kernel-rt | <1:3.10.0-693.65.1.rt56.663.el6 | 1:3.10.0-693.65.1.rt56.663.el6 |
IBM Data Risk Manager | <=2.0.6 | |
Linux Kernel | >=3.6<3.16.74 | |
Linux Kernel | >=3.17<4.4.194 | |
Linux Kernel | >=4.5<4.9.194 | |
Linux Kernel | >=4.10<4.14.146 | |
Linux Kernel | >=4.15<4.19.75 | |
Linux Kernel | >=4.20<5.2.17 | |
Red Hat Enterprise Virtualization | =4.0 | |
Red Hat Enterprise Linux | =5.0 | |
Red Hat Enterprise Linux | =6.0 | |
Red Hat Enterprise Linux | =6.4 | |
Red Hat Enterprise Linux | =7.0 | |
Red Hat Enterprise Linux | =7.6 | |
Red Hat Enterprise Linux | =8.0 | |
Red Hat Enterprise Linux Compute Node EUS | =7.6 | |
Red Hat Enterprise Linux Server EUS | =7.6 | |
Red Hat Enterprise Linux Server EUS | =7.7 | |
Red Hat Enterprise Linux Server EUS | =8.1 | |
Red Hat Enterprise Linux Server EUS | =8.2 | |
Red Hat Enterprise Linux Server EUS | =8.4 | |
Red Hat Enterprise Linux for Power, Big Endian EUS | =7.6_ppc64 | |
Red Hat Enterprise Linux for Real Time | =7 | |
Red Hat Enterprise Linux for Real Time | =8 | |
Red Hat Enterprise Linux for Real Time for NFV | =7 | |
Red Hat Enterprise Linux for Real Time for NFV | =8 | |
Red Hat Enterprise Linux for Real Time for NFV | =8.2 | |
Red Hat Enterprise Linux for Real Time for NFV | =8.4 | |
Red Hat Enterprise Linux for Real Time | =8.2 | |
Red Hat Enterprise Linux for Real Time | =8.4 | |
Red Hat Enterprise Linux Server | =7.6 | |
Red Hat Enterprise Linux Server | =8.0 | |
Red Hat Enterprise Linux Server | =7.2 | |
Red Hat Enterprise Linux Server | =7.3 | |
Red Hat Enterprise Linux Server | =7.6 | |
Red Hat Enterprise Linux Server | =8.2 | |
Red Hat Enterprise Linux Server | =8.4 | |
Red Hat Enterprise Linux Server | =7.3 | |
Red Hat Enterprise Linux Server | =7.6 | |
Red Hat Enterprise Linux Server | =8.2 | |
Red Hat Enterprise Linux Server | =8.4 | |
Red Hat Enterprise Linux | =7.7 | |
Red Hat Messaging Realtime Grid | =2.0 | |
Red Hat Enterprise Virtualization | =4.2 | |
Debian Linux | =8.0 | |
Red Hat Fedora | =29 | |
Red Hat Fedora | =30 | |
NetApp Data Availability Services | ||
NetApp SolidFire & HCI Management Node | ||
NetApp Service Processor | ||
NetApp SolidFire & HCI Storage Node | ||
NetApp SteelStore Cloud Integrated Storage | ||
All of | ||
NetApp AFF A700s Firmware | ||
NetApp A700 | ||
All of | ||
NetApp AFF A320 Firmware | ||
NetApp AFF A320 | ||
All of | ||
NetApp AFF C190 Firmware | ||
NetApp AFF C190 | ||
All of | ||
NetApp AFF A220 Firmware | ||
NetApp AFF A220 | ||
All of | ||
NetApp FAS2700 Firmware | ||
NetApp FAS2720 | ||
All of | ||
NetApp FAS2700 Firmware | ||
NetApp FAS Series | ||
All of | ||
NetApp AFF A800 Firmware | ||
NetApp AFF A800 | ||
All of | ||
NetApp H300S Firmware | ||
NetApp H300S Firmware | ||
All of | ||
NetApp H500e Firmware | ||
NetApp H500e Firmware | ||
All of | ||
NetApp H700S | ||
NetApp H700S | ||
All of | ||
NetApp H300E | ||
NetApp H300E Firmware | ||
All of | ||
NetApp H500S Firmware | ||
NetApp H500e Firmware | ||
All of | ||
NetApp H700E | ||
NetApp H700E | ||
All of | ||
NetApp H410S | ||
NetApp H410S Firmware | ||
All of | ||
NetApp HCI H610S Firmware | ||
NetApp H610S Firmware | ||
Ubuntu | =14.04 | |
Ubuntu | =16.04 | |
Ubuntu | =18.04 | |
Ubuntu | =19.04 | |
SUSE Linux | =15.0 | |
SUSE Linux | =15.1 | |
NetApp AFF A700s Firmware | ||
NetApp A700 | ||
NetApp AFF A320 Firmware | ||
NetApp AFF A320 | ||
NetApp AFF C190 Firmware | ||
NetApp AFF C190 | ||
NetApp AFF A220 Firmware | ||
NetApp AFF A220 | ||
NetApp FAS2700 Firmware | ||
NetApp FAS2720 | ||
NetApp FAS2700 Firmware | ||
NetApp FAS Series | ||
NetApp AFF A800 Firmware | ||
NetApp AFF A800 | ||
NetApp H300S Firmware | ||
NetApp H300S Firmware | ||
NetApp H500e Firmware | ||
NetApp H500e Firmware | ||
NetApp H700S | ||
NetApp H700S | ||
NetApp H300E | ||
NetApp H300E Firmware | ||
NetApp H500S Firmware | ||
NetApp H500e Firmware | ||
NetApp H700E | ||
NetApp H700E | ||
NetApp H410S | ||
NetApp H410S Firmware | ||
NetApp HCI H610S Firmware | ||
NetApp H610S Firmware | ||
debian/linux | 5.10.223-1 5.10.234-1 6.1.129-1 6.1.128-1 6.12.20-1 6.12.21-1 |
At this time there is no mitigation to the flaw, if you are able to disable wireless and your system is able to work this will be a temporary mitigation until a kernel update is available for installation.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)