USN-4093-1: Linux kernel vulnerabilities
First published: Tue Aug 13 2019(Updated: )
It was discovered that a heap buffer overflow existed in the Marvell Wireless LAN device driver for the Linux kernel. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-10126) Andrei Vlad Lutas and Dan Lutas discovered that some x86 processors incorrectly handle SWAPGS instructions during speculative execution. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2019-1125) It was discovered that the PowerPC dlpar implementation in the Linux kernel did not properly check for allocation errors in some situations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2019-12614) It was discovered that a NULL pointer dereference vulnerability existed in the Near-field communication (NFC) implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2019-12984) Jann Horn discovered a use-after-free vulnerability in the Linux kernel when accessing LDT entries in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-13233) Jann Horn discovered that the ptrace implementation in the Linux kernel did not properly record credentials in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2019-13272) It was discovered that the Marvell Wireless LAN device driver in the Linux kernel did not properly validate the BSS descriptor. A local attacker could possibly use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-3846)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-5.0.0-1013-gcp | <5.0.0-1013.13 | 5.0.0-1013.13 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-5.0.0-1013-kvm | <5.0.0-1013.14 | 5.0.0-1013.14 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-5.0.0-1014-azure | <5.0.0-1014.14 | 5.0.0-1014.14 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-5.0.0-1014-raspi2 | <5.0.0-1014.14 | 5.0.0-1014.14 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-5.0.0-1018-snapdragon | <5.0.0-1018.19 | 5.0.0-1018.19 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-5.0.0-25-generic | <5.0.0-25.26 | 5.0.0-25.26 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-5.0.0-25-generic-lpae | <5.0.0-25.26 | 5.0.0-25.26 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-5.0.0-25-lowlatency | <5.0.0-25.26 | 5.0.0-25.26 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-azure | <5.0.0.1014.13 | 5.0.0.1014.13 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-gcp | <5.0.0.1013.13 | 5.0.0.1013.13 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-generic | <5.0.0.25.26 | 5.0.0.25.26 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lpae | <5.0.0.25.26 | 5.0.0.25.26 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-gke | <5.0.0.1013.13 | 5.0.0.1013.13 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-kvm | <5.0.0.1013.13 | 5.0.0.1013.13 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency | <5.0.0.25.26 | 5.0.0.25.26 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-raspi2 | <5.0.0.1014.11 | 5.0.0.1014.11 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-snapdragon | <5.0.0.1018.11 | 5.0.0.1018.11 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-virtual | <5.0.0.25.26 | 5.0.0.25.26 |
| =19.04 | ||
| All of | ||
| ubuntu/linux-image-5.0.0-1014-azure | <5.0.0-1014.14~18.04.1 | 5.0.0-1014.14~18.04.1 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-5.0.0-25-generic | <5.0.0-25.26~18.04.1 | 5.0.0-25.26~18.04.1 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-5.0.0-25-generic-lpae | <5.0.0-25.26~18.04.1 | 5.0.0-25.26~18.04.1 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-5.0.0-25-lowlatency | <5.0.0-25.26~18.04.1 | 5.0.0-25.26~18.04.1 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-azure | <5.0.0.1014.25 | 5.0.0.1014.25 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-generic-hwe-18.04 | <5.0.0.25.82 | 5.0.0.25.82 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lpae-hwe-18.04 | <5.0.0.25.82 | 5.0.0.25.82 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency-hwe-18.04 | <5.0.0.25.82 | 5.0.0.25.82 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-snapdragon-hwe-18.04 | <5.0.0.25.82 | 5.0.0.25.82 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-virtual-hwe-18.04 | <5.0.0.25.82 | 5.0.0.25.82 |
| =18.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2019-10126
- https://ubuntu.com/security/CVE-2019-1125
- https://ubuntu.com/security/CVE-2019-12614
- https://ubuntu.com/security/CVE-2019-12984
- https://ubuntu.com/security/CVE-2019-13233
- https://ubuntu.com/security/CVE-2019-13272
- https://ubuntu.com/security/CVE-2019-3846
- https://ubuntu.com/security/notices/USN-4118-1
- https://ubuntu.com/security/notices/USN-4095-1
- https://ubuntu.com/security/notices/USN-4094-1
- https://ubuntu.com/security/notices/USN-4117-1
- https://ubuntu.com/security/notices/USN-4095-2
- https://ubuntu.com/security/notices/USN-4096-1
- https://launchpad.net/ubuntu/+source/linux-signed-gcp/5.0.0-1013.13
- https://launchpad.net/ubuntu/+source/linux-kvm/5.0.0-1013.14
- https://launchpad.net/ubuntu/+source/linux-signed-azure/5.0.0-1014.14
- https://launchpad.net/ubuntu/+source/linux-raspi2/5.0.0-1014.14
- https://launchpad.net/ubuntu/+source/linux-snapdragon/5.0.0-1018.19
- https://launchpad.net/ubuntu/+source/linux-signed/5.0.0-25.26
- https://launchpad.net/ubuntu/+source/linux/5.0.0-25.26
- https://launchpad.net/ubuntu/+source/linux-meta-azure/5.0.0.1014.13
- https://launchpad.net/ubuntu/+source/linux-meta-gcp/5.0.0.1013.13
- https://launchpad.net/ubuntu/+source/linux-meta/5.0.0.25.26
- https://launchpad.net/ubuntu/+source/linux-meta-kvm/5.0.0.1013.13
- https://launchpad.net/ubuntu/+source/linux-meta-raspi2/5.0.0.1014.11
- https://launchpad.net/ubuntu/+source/linux-meta-snapdragon/5.0.0.1018.11
- https://launchpad.net/ubuntu/+source/linux-signed-azure/5.0.0-1014.14~18.04.1
- https://launchpad.net/ubuntu/+source/linux-signed-hwe/5.0.0-25.26~18.04.1
- https://launchpad.net/ubuntu/+source/linux-hwe/5.0.0-25.26~18.04.1
- https://launchpad.net/ubuntu/+source/linux-meta-azure/5.0.0.1014.25
- https://launchpad.net/ubuntu/+source/linux-meta-hwe/5.0.0.25.82
- https://ubuntu.com/security/notices/USN-4093-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of CVE-2019-10126?
The severity of CVE-2019-10126 is high.
How does CVE-2019-10126 affect Ubuntu 19.04?
CVE-2019-10126 affects Ubuntu 19.04 if the Linux kernel is not updated to version 5.0.0-1013.13 or later.
How do I fix the vulnerability in the Marvell Wireless LAN device driver?
To fix the vulnerability in the Marvell Wireless LAN device driver, update the Linux kernel to version 5.0.0-1013.13 or later.
What are the affected versions of Ubuntu by CVE-2019-10126?
Ubuntu 19.04 is affected by CVE-2019-10126.
Where can I find more information about CVE-2019-10126?
You can find more information about CVE-2019-10126 on the Ubuntu Security website.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- agent/weakness
- collector/usn
- source/Ubuntu
- anchor-related/USN-4118-1
- anchor-related/USN-4095-1
- anchor-related/USN-4094-1
- anchor-related/USN-4117-1
- anchor-related/USN-4095-2
- anchor-related/USN-4096-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/19.04
- version/ubuntu ubuntu/18.04