Skip to content
OpenAdvisories

Description

A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.

Affected products

VendorProductAffectedFixed
Red Hat kernel all kernel versions 3.x.x and 4.x.x before 4.18.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 5.4.13-1 —
Debian 13 linux 5.4.13-1 —
Debian 12 linux 5.4.13-1 —
Debian 8 linux 3.16.81-1 DLA-2068-1
Debian 8 linux-4.9 4.9.210-1~deb8u1 DLA-2114-1
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS linux-vmware No fix yet —
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +3 No fix yet —
Ubuntu 18.04 LTS linux 4.15.0-74.84 USN-4227-1
Ubuntu 18.04 LTS linux-aws 4.15.0-1057.59 USN-4227-1
Ubuntu 18.04 LTS linux-aws-5.0 5.0.0-1023.26~18.04.1 USN-4226-1
Ubuntu 18.04 LTS linux-azure 5.0.0-1028.30~18.04.1 USN-4226-1
Ubuntu 18.04 LTS linux-azure-5.3 5.3.0-1009.10~18.04.1 USN-4225-1
Ubuntu 18.04 LTS linux-gcp 5.0.0-1028.29~18.04.1 —
Ubuntu 18.04 LTS linux-gcp-5.3 5.3.0-1010.11~18.04.1 USN-4225-1
Ubuntu 18.04 LTS linux-gcp-edge +2 No fix yet —
Ubuntu 18.04 LTS linux-gke-4.15 4.15.0-1050.53 USN-4227-1
Ubuntu 18.04 LTS linux-gke-5.0 5.0.0-1027.28~18.04.1 USN-4226-1
Ubuntu 18.04 LTS linux-hwe 5.3.0-26.28~18.04.1 USN-4225-2
Ubuntu 18.04 LTS linux-kvm 4.15.0-1052.52 USN-4227-1
Ubuntu 18.04 LTS linux-oem 4.15.0-1066.76 USN-4227-1
Ubuntu 18.04 LTS linux-oem-osp1 5.0.0-1033.38 USN-4226-1
Ubuntu 18.04 LTS linux-oracle 4.15.0-1031.34 USN-4227-1
Ubuntu 18.04 LTS linux-oracle-5.0 5.0.0-1009.14~18.04.1 USN-4226-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1053.57 USN-4227-1
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1070.77 USN-4227-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS linux 4.4.0-171.200 USN-4228-1
Ubuntu 16.04 LTS linux-aws 4.4.0-1100.111 USN-4228-1
Ubuntu 16.04 LTS linux-aws-hwe 4.15.0-1057.59~16.04.1 USN-4227-1
Ubuntu 16.04 LTS linux-azure 4.15.0-1066.71 USN-4227-1
Ubuntu 16.04 LTS linux-gcp 4.15.0-1052.56 USN-4227-1
Ubuntu 16.04 LTS linux-hwe 4.15.0-74.83~16.04.1 USN-4227-1
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu 16.04 LTS linux-kvm 4.4.0-1064.71 USN-4228-1
Ubuntu 16.04 LTS linux-oracle 4.15.0-1031.34~16.04.1 USN-4227-1
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1127.136 USN-4228-1
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1131.139 USN-4228-1
Ubuntu Pro FIPS 18.04 LTS linux-aws-fips +2 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2018.18 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2006.7 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1027.32 —
Ubuntu Pro 20.04 LTS linux-azure-fde-5.15 5.15.0-1114.123~20.04.1 —
Ubuntu Pro 14.04 LTS linux No fix yet —
Ubuntu Pro 14.04 LTS linux-aws 4.4.0-1060.64 USN-4228-2
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1066.71~14.04.1 USN-4227-2
Ubuntu Pro 14.04 LTS linux-lts-xenial 4.4.0-171.200~14.04.1 USN-4228-2
ReleasePackageFixed inAdvisory
RHEL 8 kernel-rt +12 4.18.0-147.5.1.rt24.98.el8_1 RHSA-2020:0328
RHEL 8 perf +26 4.18.0-147.5.1.el8_1 RHSA-2020:0339
RHEL 7 kernel +15 3.10.0-1062.12.1.el7 RHSA-2020:1493, RHSA-2020:0374
RHEL 7 kernel-alt 4.14.0-115.19.1.el7a RHSA-2020:1493
RHEL 7 kernel-rt +10 3.10.0-1062.12.1.rt56.1042.el7 RHSA-2020:0375
RHEL 7 perf +2 3.10.0-957.46.1.el7 RHSA-2020:1493, RHSA-2020:0664, RHSA-2020:0374
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 8.0 E4S perf +18 4.18.0-80.16.1.el8_0 RHSA-2020:0831
RHEL 7.6 EUS perf +18 3.10.0-957.46.1.el7 RHSA-2020:0664
RHEL 7.5 EUS perf +17 3.10.0-862.48.1.el7 RHSA-2020:0543
RHEL 7.4 TUS perf +11 3.10.0-693.64.1.el7 RHSA-2020:0592
RHEL 7.4 E4S perf +13 3.10.0-693.64.1.el7 RHSA-2020:0592
RHEL 7.4 AUS perf +11 3.10.0-693.64.1.el7 RHSA-2020:0592
RHEL 7.3 TUS perf +11 3.10.0-514.73.1.el7 RHSA-2020:0653
RHEL 7.3 E4S perf +13 3.10.0-514.73.1.el7 RHSA-2020:0653
RHEL 7.3 AUS perf +11 3.10.0-514.73.1.el7 RHSA-2020:0653
RHEL 7.2 AUS perf +11 3.10.0-327.85.1.el7 RHSA-2020:0661
Red Hat MRG 2 kernel-rt +10 1:3.10.0-693.64.1.rt56.662.el6rt RHSA-2020:0609
ReleasePackageFixed inAdvisory
SLES 15 SP1 kernel-azure +2 4.12.14-8.22.1 SUSE-SU-2019:3372-1
SLES 15 SP1 kernel-docs 4.12.14-197.29.2 SUSE-SU-2019:3317-1
SLES 15 SP1 kernel-syms +4 4.12.14-197.29.1 SUSE-SU-2019:3317-1
SLES 15 kernel-azure +2 4.12.14-5.47.1 SUSE-SU-2019:3289-1
SLES 15 kernel-docs +6 4.12.14-150.47.1 SUSE-SU-2019:3381-1
SLES 12 SP5 kernel-azure +2 4.12.14-16.7.1 SUSE-SU-2020:0093-1
SLES 12 SP5 kernel-docs +4 4.12.14-122.7.1 SUSE-SU-2019:3200-1
SLES 12 SP4 kernel-azure +2 4.12.14-6.34.1 SUSE-SU-2019:3316-1
SLES 12 SP4 kernel-docs +4 4.12.14-95.45.1 SUSE-SU-2019:3371-1
SLES 12 SP3 kernel-syms +2 4.4.180-94.113.1 SUSE-SU-2019:3379-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_28 9-2.2 SUSE-SU-2020:2491-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_29 7-2.2 SUSE-SU-2020:2497-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_30 1-4.5.1 SUSE-SU-2020:2498-1, SUSE-SU-2019:3379-1
Show 17 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP2 kernel-syms +2 4.4.121-92.129.1 SUSE-SU-2020:1255-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_32 9-2.2 SUSE-SU-2020:2491-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_33 7-2.2 SUSE-SU-2020:2492-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_34 1-3.3.1 SUSE-SU-2020:1255-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.7.1 SUSE-SU-2020:0093-1
SLES for SAP 12 SP5 kernel-syms +2 4.12.14-122.7.1 SUSE-SU-2019:3200-1
SLES for SAP 12 SP4 kernel-azure +2 4.12.14-6.34.1 SUSE-SU-2019:3316-1
SLES for SAP 12 SP4 kernel-syms +2 4.12.14-95.45.1 SUSE-SU-2019:3371-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.180-94.113.1 SUSE-SU-2019:3379-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_28 9-2.2 SUSE-SU-2020:2491-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_29 7-2.2 SUSE-SU-2020:2497-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_30 1-4.5.1 SUSE-SU-2020:2498-1, SUSE-SU-2019:3379-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.129.1 SUSE-SU-2020:1255-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_32 9-2.2 SUSE-SU-2020:2491-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_33 7-2.2 SUSE-SU-2020:2492-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_34 1-3.3.1 SUSE-SU-2020:1255-1
SLE Real Time 12 SP5 kernel-rt +3 4.12.14-10.5.1 SUSE-SU-2020:0667-1
SLE Real Time 12 SP4 kernel-rt +3 4.12.14-8.12.1 SUSE-SU-2020:0599-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-197.29.1 SUSE-SU-2019:3317-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_5 +1 8-2.2 SUSE-SU-2020:2526-1, SUSE-SU-2020:2505-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_7 6-2.2 SUSE-SU-2020:2505-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_8 1-3.3.1 SUSE-SU-2020:2513-1, SUSE-SU-2019:3317-1
SLE Live Patching 15 kernel-default 4.12.14-150.47.1 SUSE-SU-2019:3381-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_14 +1 8-2.2 SUSE-SU-2020:2505-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_16 6-2.2 SUSE-SU-2020:2505-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_17 1-1.3.2 SUSE-SU-2020:2513-1, SUSE-SU-2019:3381-1
SLE Live Patching 12 SP5 kernel-default 4.12.14-122.7.1 SUSE-SU-2019:3200-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_0 6-15.2 SUSE-SU-2020:2505-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_1 1-8.7.1 SUSE-SU-2020:2506-1, SUSE-SU-2019:3200-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_2 6-2.2 SUSE-SU-2020:2513-1
SLE Live Patching 12 SP4 kernel-default 4.12.14-95.45.1 SUSE-SU-2019:3371-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_10 6-2.2 SUSE-SU-2020:2505-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_11 1-6.5.1 SUSE-SU-2020:2506-1, SUSE-SU-2019:3371-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_8 8-2.2 SUSE-SU-2020:2505-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_9 7-2.2 SUSE-SU-2020:2505-1
SUSE Real Time Module 15 SP1 kernel-rt +3 4.12.14-14.17.1 SUSE-SU-2020:0613-1
SUSE OpenStack Cloud Crowbar 8 kernel-syms +2 4.4.180-94.113.1 SUSE-SU-2019:3379-1
SUSE OpenStack Cloud Crowbar 8 kgraft-patch-SLE12-SP3_Update_30 1-4.5.1 SUSE-SU-2019:3379-1
SUSE OpenStack Cloud 8 kernel-syms +2 4.4.180-94.113.1 SUSE-SU-2019:3379-1
SUSE OpenStack Cloud 8 kgraft-patch-SLE12-SP3_Update_30 1-4.5.1 SUSE-SU-2019:3379-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.129.1 SUSE-SU-2020:1255-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_34 1-3.3.1 SUSE-SU-2020:1255-1
SUSE HPE Helion OpenStack 8 kernel-syms +2 4.4.180-94.113.1 SUSE-SU-2019:3379-1
SUSE HPE Helion OpenStack 8 kgraft-patch-SLE12-SP3_Update_30 1-4.5.1 SUSE-SU-2019:3379-1
SUSE Enterprise Storage 5 kernel-syms +2 4.4.180-94.113.1 SUSE-SU-2019:3379-1
SUSE Enterprise Storage 5 kgraft-patch-SLE12-SP3_Update_30 1-4.5.1 SUSE-SU-2019:3379-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.1 kernel-docs +8 4.12.14-lp151.28.36.1 openSUSE-SU-2019:2675-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 perf +19 4.18.0-147.5.1.el8_1 ELSA-2020-0339
Oracle Linux 7 kernel-uek +5 4.1.12-124.46.3.el7uek ELSA-2021-9002, ELSA-2020-5569
Oracle Linux 7 kernel-uek-tools +3 4.14.35-1902.11.3.el7uek ELSA-2020-5569
Oracle Linux 7 perf +12 3.10.0-1062.12.1.el7 ELSA-2020-5569, ELSA-2020-0374

Advisories 47

References