Skip to content
OpenAdvisories
High RHSA-2019:2945 1 CVE

Red Hat Security Advisory: kpatch-patch security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::server kpatch-patch-3_10_0-1062 0:1-2.el7
Red Hat · RHEL 7 enterprise_linux:7::server kpatch-patch-3_10_0-1062-debuginfo 0:1-2.el7

Vulnerabilities 1

  • High 7.9
    CVE-2019-9500

    Broadcom brcmfmac driver is vulnerable to a heap buffer overflow

    The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffe…

    Broadcom brcmfmac WiFi driver linux-raspi2 linux-hwe Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1701224
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2945.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-9500
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-9500
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-9500
  • article
    https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html#cve-2019-9500-heap-buffer-overflow-in-brcmf-wowl-nd-results
  • article
    https://kb.cert.org/vuls/id/166939/
  • article
    https://www.bleepingcomputer.com/news/security/broadcom-wifi-driver-flaws-expose-computers-phones-iot-to-rce-attacks/