Summary
It was discovered that a buffer overflow existed in the 802.11 Wi-Fi
configuration interface for the Linux kernel when handling beacon settings.
A local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2019-16746)
Nicolas Waisman discovered that the WiFi driver stack in the Linux kernel
did not properly validate SSID lengths. A physically proximate attacker
could use this to cause a denial of service (system crash).
(CVE-2019-17133)
It was discovered that the ADIS16400 IIO IMU Driver for the Linux kernel
did not properly deallocate memory in certain error conditions. A local
attacker could use this to cause a denial of service (memory exhaustion).
(CVE-2019-19060)
It was discovered that the Intel OPA Gen1 Infiniband Driver for the Linux
kernel did not properly deallocate memory in certain error conditions. A
local attacker could use this to cause a denial of service (memory
exhaustion). (CVE-2019-19065)
It was discovered that the Cascoda CA8210 SPI 802.15.4 wireless controller
driver for the Linux kernel did not properly deallocate memory in certain
error conditions. A local attacker could use this to cause a denial of
service (memory exhaustion). (CVE-2019-19075)
Nicolas Waisman discovered that the Chelsio T4/T5 RDMA Driver for the Linux
kernel performed DMA from a kernel stack. A local attacker could use this
to cause a denial of service (system crash). (CVE-2019-17075)
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws-hwe | 4.15.0-1056.58~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gcp | 4.15.0-1050.53 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.15.0-72.81~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-oracle | 4.15.0-1030.33~16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-72.81 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1056.58 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-4.15 | 4.15.0-1049.52 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1051.51 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oem | 4.15.0-1065.75 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle | 4.15.0-1030.33 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2 | 4.15.0-1052.56 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-snapdragon | 4.15.0-1069.76 |
Vulnerabilities 6
-
Unscored —
An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of v…
-
Unscored —
An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The …
-
Unscored —
In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE…
-
Unscored —
A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9…
-
Unscored —
A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows …
-
Unscored —
A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel before 5.3.8 allows…