Skip to content
OpenAdvisories
High RHSA-2019:4171 1 CVE

Red Hat Security Advisory: kpatch-patch security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server kpatch-patch-3_10_0-957_35_1 0:1-3.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server kpatch-patch-3_10_0-957_35_1-debuginfo 0:1-3.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server kpatch-patch-3_10_0-957_35_2 0:1-2.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server kpatch-patch-3_10_0-957_35_2-debuginfo 0:1-2.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server kpatch-patch-3_10_0-957_38_1 0:1-1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server kpatch-patch-3_10_0-957_38_1-debuginfo 0:1-1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server kpatch-patch-3_10_0-957_38_2 0:1-1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server kpatch-patch-3_10_0-957_38_2-debuginfo 0:1-1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server kpatch-patch-3_10_0-957_38_3 0:1-1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server kpatch-patch-3_10_0-957_38_3-debuginfo 0:1-1.el7

Vulnerabilities 1

  • High 7.9
    CVE-2019-9500

    Broadcom brcmfmac driver is vulnerable to a heap buffer overflow

    The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffe…

    Broadcom brcmfmac WiFi driver linux-raspi2 linux-hwe Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1701224
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4171.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-9500
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-9500
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-9500
  • article
    https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html#cve-2019-9500-heap-buffer-overflow-in-brcmf-wowl-nd-results
  • article
    https://kb.cert.org/vuls/id/166939/
  • article
    https://www.bleepingcomputer.com/news/security/broadcom-wifi-driver-flaws-expose-computers-phones-iot-to-rce-attacks/