Skip to content
OpenAdvisories

Description

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 5.3.9-1 —
Debian 13 linux 5.3.9-1 —
Debian 12 linux 5.3.9-1 —
Debian 8 linux 3.16.81-1 DLA-2068-1
Debian 8 linux-4.9 4.9.210-1~deb8u1 DLA-2114-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +3 No fix yet —
Ubuntu 18.04 LTS linux 4.15.0-72.81 USN-4210-1
Ubuntu 18.04 LTS linux-aws 4.15.0-1056.58 USN-4210-1
Ubuntu 18.04 LTS linux-aws-5.0 5.0.0-1023.26~18.04.1 USN-4226-1
Ubuntu 18.04 LTS linux-azure 5.0.0-1028.30~18.04.1 USN-4226-1
Ubuntu 18.04 LTS linux-azure-5.3 5.3.0-1008.9~18.04.1 —
Ubuntu 18.04 LTS linux-gcp 5.0.0-1028.29~18.04.1 —
Ubuntu 18.04 LTS linux-gcp-5.3 5.3.0-1009.10~18.04.1 USN-4208-1
Ubuntu 18.04 LTS linux-gcp-edge +2 No fix yet —
Ubuntu 18.04 LTS linux-gke-4.15 4.15.0-1049.52 USN-4210-1
Ubuntu 18.04 LTS linux-gke-5.0 5.0.0-1027.28~18.04.1 USN-4226-1
Ubuntu 18.04 LTS linux-hwe 5.3.0-26.28~18.04.1 —
Ubuntu 18.04 LTS linux-kvm 4.15.0-1051.51 USN-4210-1
Ubuntu 18.04 LTS linux-oem 4.15.0-1065.75 USN-4210-1
Ubuntu 18.04 LTS linux-oem-osp1 5.0.0-1033.38 USN-4226-1
Ubuntu 18.04 LTS linux-oracle 4.15.0-1030.33 USN-4210-1
Ubuntu 18.04 LTS linux-oracle-5.0 5.0.0-1009.14~18.04.1 USN-4226-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1052.56 USN-4210-1
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1069.76 USN-4210-1
Ubuntu 16.04 LTS linux 4.4.0-170.199 USN-4211-1
Ubuntu 16.04 LTS linux-aws 4.4.0-1099.110 USN-4211-1
Ubuntu 16.04 LTS linux-aws-hwe 4.15.0-1056.58~16.04.1 USN-4210-1
Ubuntu 16.04 LTS linux-azure 4.15.0-1064.69 —
Ubuntu 16.04 LTS linux-gcp 4.15.0-1050.53 USN-4210-1
Ubuntu 16.04 LTS linux-hwe 4.15.0-72.81~16.04.1 USN-4210-1
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu 16.04 LTS linux-kvm 4.4.0-1063.70 USN-4211-1
Ubuntu 16.04 LTS linux-oracle 4.15.0-1030.33~16.04.1 USN-4210-1
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1126.135 USN-4211-1
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1130.138 USN-4211-1
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro FIPS 18.04 LTS linux-aws-fips +2 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2018.18 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2006.7 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1026.31 —
Ubuntu Pro 14.04 LTS linux No fix yet —
Ubuntu Pro 14.04 LTS linux-aws 4.4.0-1059.63 USN-4211-2
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1064.69~14.04.1 —
Ubuntu Pro 14.04 LTS linux-lts-xenial 4.4.0-170.199~14.04.1 USN-4211-2
ReleasePackageFixed inAdvisory
RHEL 7 kernel +15 3.10.0-1062.12.1.el7 RHSA-2020:0374, RHSA-2020:0174
RHEL 7 kernel-alt 4.14.0-115.17.1.el7a RHSA-2020:0174
RHEL 7 kernel-rt +10 3.10.0-1062.12.1.rt56.1042.el7 RHSA-2020:0375
RHEL 7 perf +2 3.10.0-957.46.1.el7 RHSA-2020:0664, RHSA-2020:0374, RHSA-2020:0174
RHEL 6 perf +15 2.6.32-754.28.1.el6 RHSA-2020:0790
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 7.6 EUS perf +18 3.10.0-957.46.1.el7 RHSA-2020:0664
RHEL 7.5 EUS perf +17 3.10.0-862.48.1.el7 RHSA-2020:0543
RHEL 7.4 TUS perf +11 3.10.0-693.64.1.el7 RHSA-2020:0592
RHEL 7.4 E4S perf +13 3.10.0-693.64.1.el7 RHSA-2020:0592
RHEL 7.4 AUS perf +11 3.10.0-693.64.1.el7 RHSA-2020:0592
RHEL 7.3 TUS perf +11 3.10.0-514.73.1.el7 RHSA-2020:0653
RHEL 7.3 E4S perf +13 3.10.0-514.73.1.el7 RHSA-2020:0653
RHEL 7.3 AUS perf +11 3.10.0-514.73.1.el7 RHSA-2020:0653
RHEL 7.2 AUS perf +11 3.10.0-327.85.1.el7 RHSA-2020:0661
Red Hat MRG 2 kernel-rt +10 1:3.10.0-693.64.1.rt56.662.el6rt RHSA-2020:0609
ReleasePackageFixed inAdvisory
SLES 15 SP1 kernel-azure +2 4.12.14-8.19.1 SUSE-SU-2019:2952-1
SLES 15 SP1 kernel-docs +5 4.12.14-197.26.1 SUSE-SU-2019:2947-1
SLES 15 kernel-azure +2 4.12.14-5.44.1 SUSE-SU-2019:2951-1
SLES 15 kernel-docs +6 4.12.14-150.41.1 SUSE-SU-2019:2946-1
SLES 12 SP5 kernel-azure +2 4.12.14-16.7.1 SUSE-SU-2020:0093-1
SLES 12 SP4 kernel-azure +2 4.12.14-6.29.1 SUSE-SU-2019:2953-1
SLES 12 SP4 kernel-docs +4 4.12.14-95.37.1 SUSE-SU-2019:2879-1
SLES 12 SP3 kernel-syms +2 4.4.180-94.107.1 SUSE-SU-2019:2949-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_20 8-2.1 SUSE-SU-2019:2829-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_21 +1 7-2.1 SUSE-SU-2019:2829-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_23 6-2.1 SUSE-SU-2019:2829-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_24 +2 5-2.1 SUSE-SU-2019:2829-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_27 +1 3-2.1 SUSE-SU-2019:2829-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_29 1-4.3.1 SUSE-SU-2019:2949-1
Show 19 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP2 kernel-syms +2 4.4.121-92.125.1 SUSE-SU-2019:2984-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_26 8-2.1 SUSE-SU-2019:2829-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_27 +2 6-2.1 SUSE-SU-2019:2829-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_30 5-2.1 SUSE-SU-2019:2829-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_31 4-2.1 SUSE-SU-2019:2829-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_32 3-2.1 SUSE-SU-2019:2829-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_33 1-3.5.1 SUSE-SU-2019:2984-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_33 6-2.1 SUSE-SU-2019:2821-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_34 5-2.1 SUSE-SU-2019:2829-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_35 +1 3-2.1 SUSE-SU-2019:2829-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_37 2-2.3 SUSE-SU-2019:3237-1
SLES 11 SP4 kernel-ec2 +8 3.0.101-108.108.1 SUSE-SU-2019:14218-1
SLES 11 SP4 ocfs2 1.6-0.28.11.2 SUSE-SU-2019:14218-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.7.1 SUSE-SU-2020:0093-1
SLES for SAP 12 SP4 kernel-azure +2 4.12.14-6.29.1 SUSE-SU-2019:2953-1
SLES for SAP 12 SP4 kernel-syms +2 4.12.14-95.37.1 SUSE-SU-2019:2879-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.180-94.107.1 SUSE-SU-2019:2949-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_20 8-2.1 SUSE-SU-2019:2829-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_21 +1 7-2.1 SUSE-SU-2019:2829-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_23 6-2.1 SUSE-SU-2019:2829-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_24 +2 5-2.1 SUSE-SU-2019:2829-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_27 +1 3-2.1 SUSE-SU-2019:2829-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_29 1-4.3.1 SUSE-SU-2019:2949-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.125.1 SUSE-SU-2019:2984-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_26 8-2.1 SUSE-SU-2019:2829-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_27 +2 6-2.1 SUSE-SU-2019:2829-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_30 5-2.1 SUSE-SU-2019:2829-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_31 4-2.1 SUSE-SU-2019:2829-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_32 3-2.1 SUSE-SU-2019:2829-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_33 1-3.5.1 SUSE-SU-2019:2984-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_33 6-2.1 SUSE-SU-2019:2821-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_34 5-2.1 SUSE-SU-2019:2829-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_35 +1 3-2.1 SUSE-SU-2019:2829-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_37 2-2.3 SUSE-SU-2019:3237-1
SLE Real Time 12 SP4 kernel-rt +3 4.12.14-8.9.3 SUSE-SU-2019:3294-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-197.26.1 SUSE-SU-2019:2947-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_0 7-19.1 SUSE-SU-2019:2829-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_1 6-2.1 SUSE-SU-2019:2829-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_2 5-2.1 SUSE-SU-2019:2829-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_3 +1 3-2.1 SUSE-SU-2019:2864-1, SUSE-SU-2019:2829-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_5 +1 2-2.1 SUSE-SU-2019:2859-1, SUSE-SU-2019:2829-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_7 1-3.5.1 SUSE-SU-2019:2947-1
SLE Live Patching 15 kernel-default 4.12.14-150.41.1 SUSE-SU-2019:2946-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_11 4-2.1 SUSE-SU-2019:2829-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_12 +1 3-2.1 SUSE-SU-2019:2829-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_14 +1 2-2.1 SUSE-SU-2019:2859-1, SUSE-SU-2019:2829-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_16 1-1.3.1 SUSE-SU-2019:2946-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_7 7-2.1 SUSE-SU-2019:2829-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_8 6-2.1 SUSE-SU-2019:2829-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_9 +1 5-2.1 SUSE-SU-2019:2829-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_0 2-3.1 SUSE-SU-2020:0183-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_0 8-2.22.1 SUSE-SU-2019:2829-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_1 7-2.1 SUSE-SU-2019:2829-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_2 6-2.1 SUSE-SU-2019:2829-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_3 +1 5-2.1 SUSE-SU-2019:2829-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_5 4-2.1 SUSE-SU-2019:2829-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_6 +1 3-2.1 SUSE-SU-2019:2829-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_8 2-2.1 SUSE-SU-2019:2859-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_9 1-6.5.1 SUSE-SU-2019:2879-1
SUSE Real Time Module 15 SP1 kernel-rt +1 4.12.14-14.14.3 SUSE-SU-2019:3295-1
SUSE Real Time Module 15 SP1 kernel-syms-rt +1 4.12.14-14.14.2 SUSE-SU-2019:3295-1
SUSE OpenStack Cloud Crowbar 8 kernel-syms +2 4.4.180-94.107.1 SUSE-SU-2019:2949-1
SUSE OpenStack Cloud Crowbar 8 kgraft-patch-SLE12-SP3_Update_29 1-4.3.1 SUSE-SU-2019:2949-1
SUSE OpenStack Cloud 8 kernel-syms +2 4.4.180-94.107.1 SUSE-SU-2019:2949-1
SUSE OpenStack Cloud 8 kgraft-patch-SLE12-SP3_Update_29 1-4.3.1 SUSE-SU-2019:2949-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.125.1 SUSE-SU-2019:2984-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_33 1-3.5.1 SUSE-SU-2019:2984-1
SUSE HPE Helion OpenStack 8 kernel-syms +2 4.4.180-94.107.1 SUSE-SU-2019:2949-1
SUSE HPE Helion OpenStack 8 kgraft-patch-SLE12-SP3_Update_29 1-4.3.1 SUSE-SU-2019:2949-1
SUSE Enterprise Storage 5 kernel-syms +2 4.4.180-94.107.1 SUSE-SU-2019:2949-1
SUSE Enterprise Storage 5 kgraft-patch-SLE12-SP3_Update_29 1-4.3.1 SUSE-SU-2019:2949-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed kernel-source 5.14.6-1.4 openSUSE-SU-2024:13704-1, openSUSE-SU-2024:10728-1
openSUSE Leap 15.1 kernel-docs +8 4.12.14-lp151.28.25.1 openSUSE-SU-2019:2444-1
openSUSE Leap 15.0 kernel-docs +8 4.12.14-lp150.12.79.1 openSUSE-SU-2019:2392-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 kernel-uek +5 4.1.12-124.54.6.1.el7uek ELSA-2021-9459, ELSA-2020-5845
Oracle Linux 7 kernel-uek-tools +3 4.14.35-1902.306.2.el7uek ELSA-2020-5845
Oracle Linux 7 perf +12 3.10.0-1062.12.1.el7 ELSA-2020-5845, ELSA-2020-0374

Advisories 42

References