UBUNTU-CVE-2019-14814

Details

There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.

Affected Packages(42 packages)

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-166.195

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1096.107

linux-aws-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1052.54~16.04.1

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1061.66

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1047.50

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-66.75~16.04.1

linux-kvm

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1060.67

linux-oracle

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1027.30~16.04.1

linux-raspi2

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1124.133

linux-snapdragon

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1128.136

References

REPORT

https://lore.kernel.org/linux-wireless/20190828020751.13625-1-huangwenabc@gmail.com/

REPORT

https://ubuntu.com/security/CVE-2019-14814

ADVISORY

https://ubuntu.com/security/notices/USN-4157-1

ADVISORY

https://ubuntu.com/security/notices/USN-4157-2

ADVISORY

https://ubuntu.com/security/notices/USN-4162-1

ADVISORY

https://ubuntu.com/security/notices/USN-4162-2

ADVISORY

https://ubuntu.com/security/notices/USN-4163-1

ADVISORY

https://ubuntu.com/security/notices/USN-4163-2

REPORT

https://www.cve.org/CVERecord?id=CVE-2019-14814

REPORT

https://www.openwall.com/lists/oss-security/2019/08/28/1