Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2019-10126

CRITICAL9.8

A flaw was found in the Linux kernel

Published Jun 14, 2019

Modified 1 years ago

No fix available

Details

A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences.

References

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html WEBhttp://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html WEBhttp://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html WEBhttp://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html WEBhttp://www.securityfocus.com/bid/108817 ADVISORYhttps://access.redhat.com/errata/RHSA-2019:3055 ADVISORYhttps://access.redhat.com/errata/RHSA-2019:3076 ADVISORYhttps://access.redhat.com/errata/RHSA-2019:3089 ADVISORYhttps://access.redhat.com/errata/RHSA-2019:3309 ADVISORYhttps://access.redhat.com/errata/RHSA-2019:3517 ADVISORYhttps://access.redhat.com/errata/RHSA-2020:0174 ADVISORYhttps://access.redhat.com/errata/RHSA-2020:0204 WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10126 WEBhttps://lists.debian.org/debian-lts-announce/2019/06/msg00010.html WEBhttps://lists.debian.org/debian-lts-announce/2019/06/msg00011.html WEBhttps://seclists.org/bugtraq/2019/Jul/33 WEBhttps://seclists.org/bugtraq/2019/Jun/26 WEBhttps://security.netapp.com/advisory/ntap-20190710-0002/WEBhttps://support.f5.com/csp/article/K95593121 ADVISORYhttps://usn.ubuntu.com/4093-1/ADVISORYhttps://usn.ubuntu.com/4094-1/ADVISORYhttps://usn.ubuntu.com/4095-1/ADVISORYhttps://usn.ubuntu.com/4095-2/ADVISORYhttps://usn.ubuntu.com/4117-1/ADVISORYhttps://usn.ubuntu.com/4118-1/ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2019-10126 ADVISORYhttps://www.debian.org/security/2019/dsa-4465

CVSS Analysis

CVSS v3.0

9.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

Other

Ecosystems

Timeline

PublishedJun 14, 2019

ModifiedAug 4, 2024

CVE-2019-10126 | Mondoo Vulnerability Intelligence