Skip to content
OpenAdvisories

Description

An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 5.5.13-1 —
Debian 13 linux 5.5.13-1 —
Debian 12 linux 5.5.13-1 —
Debian 9 linux 4.9.210-1+deb9u1 DSA-4698-1
Debian 8 linux 3.16.84-1 DLA-2241-1
Debian 8 linux-4.9 4.9.210-1+deb9u1~deb8u1 DLA-2242-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +2 No fix yet —
Ubuntu 18.04 LTS linux 4.15.0-96.97 —
Ubuntu 18.04 LTS linux-aws 4.15.0-1065.69 —
Ubuntu 18.04 LTS linux-aws-5.3 5.3.0-1017.18~18.04.1 —
Ubuntu 18.04 LTS linux-azure-5.3 5.3.0-1020.21~18.04.1 —
Ubuntu 18.04 LTS linux-gcp +6 No fix yet —
Ubuntu 18.04 LTS linux-gcp-5.3 +1 5.3.0-1018.19~18.04.1 —
Ubuntu 18.04 LTS linux-gke-4.15 4.15.0-1057.60 —
Ubuntu 18.04 LTS linux-gke-5.0 5.0.0-1035.36 —
Ubuntu 18.04 LTS linux-hwe 5.3.0-51.44~18.04.2 —
Ubuntu 18.04 LTS linux-kvm 4.15.0-1058.59 —
Ubuntu 18.04 LTS linux-oem 4.15.0-1079.89 —
Ubuntu 18.04 LTS linux-oem-osp1 5.0.0-1050.55 —
Ubuntu 18.04 LTS linux-oracle 4.15.0-1037.41 —
Ubuntu 18.04 LTS linux-oracle-5.3 5.3.0-1016.18~18.04.1 —
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1060.64 —
Ubuntu 18.04 LTS linux-raspi2-5.3 5.3.0-1023.25~18.04.1 —
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1076.83 —
Ubuntu 16.04 LTS linux 4.4.0-177.207 —
Ubuntu 16.04 LTS linux-aws 4.4.0-1105.116 —
Ubuntu 16.04 LTS linux-aws-hwe 4.15.0-1065.69~16.04.1 —
Ubuntu 16.04 LTS linux-azure 4.15.0-1077.82 —
Ubuntu 16.04 LTS linux-gcp 4.15.0-1060.64 —
Ubuntu 16.04 LTS linux-hwe 4.15.0-96.97~16.04.1 —
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu 16.04 LTS linux-kvm 4.4.0-1069.76 —
Ubuntu 16.04 LTS linux-oracle 4.15.0-1037.41~16.04.1 —
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1131.140 —
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1135.143 —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro FIPS 18.04 LTS linux-aws-fips +2 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2018.18 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2006.7 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1032.37 —
Ubuntu Pro 14.04 LTS linux No fix yet —
Ubuntu Pro 14.04 LTS linux-aws 4.4.0-1065.69 —
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1077.82~14.04.1 —
Ubuntu Pro 14.04 LTS linux-lts-xenial 4.4.0-177.207~14.04.1 —
ReleasePackageFixed inAdvisory
RHEL 8 kernel-rt +12 4.18.0-193.13.2.rt13.65.el8_2 RHSA-2020:3016
RHEL 8 perf +26 4.18.0-193.13.2.el8_2 RHSA-2020:3010
RHEL 7 kernel +15 3.10.0-1127.18.2.el7 RHSA-2020:3220
RHEL 7 kernel-rt +10 3.10.0-1127.18.2.rt56.1116.el7 RHSA-2020:3221
RHEL 7 perf +3 3.10.0-957.58.2.el7 RHSA-2020:3226, RHSA-2020:3220
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 8.1 EUS perf +26 4.18.0-147.24.2.el8_1 RHSA-2020:3222
RHEL 8.0 E4S perf +18 4.18.0-80.27.1.el8_0 RHSA-2020:3041
RHEL 7.7 EUS perf +19 3.10.0-1062.31.2.el7 RHSA-2020:3224
RHEL 7.6 EUS perf +19 3.10.0-957.58.2.el7 RHSA-2020:3226
RHEL 7.4 TUS perf +12 3.10.0-693.72.1.el7 RHSA-2020:3432
RHEL 7.4 E4S perf +14 3.10.0-693.72.1.el7 RHSA-2020:3432
RHEL 7.4 AUS perf +12 3.10.0-693.72.1.el7 RHSA-2020:3432
RHEL 7.3 TUS perf +11 3.10.0-514.78.1.el7 RHSA-2020:2832
RHEL 7.3 E4S perf +13 3.10.0-514.78.1.el7 RHSA-2020:2832
RHEL 7.3 AUS perf +11 3.10.0-514.78.1.el7 RHSA-2020:2832
RHEL 7.2 AUS perf +12 3.10.0-327.90.2.el7 RHSA-2020:3232
Red Hat MRG 2 kernel-rt +10 1:3.10.0-693.72.1.rt56.672.el6rt RHSA-2020:3389
ReleasePackageFixed inAdvisory
SLES 15 SP1 kernel-azure +2 4.12.14-8.33.1 SUSE-SU-2020:1604-1
SLES 15 SP1 kernel-docs +5 4.12.14-197.45.1 SUSE-SU-2020:1599-1
SLES 15 kernel-docs +6 4.12.14-150.52.1 SUSE-SU-2020:1663-1
SLES 12 SP5 kernel-azure +2 4.12.14-16.16.1 SUSE-SU-2020:1587-1
SLES 12 SP5 kernel-docs +4 4.12.14-122.23.1 SUSE-SU-2020:1602-1
SLES 12 SP4 kernel-azure +2 4.12.14-6.43.1 SUSE-SU-2020:1603-1
SLES 12 SP4 kernel-docs +4 4.12.14-95.54.1 SUSE-SU-2020:1605-1
SLES 12 SP3 kernel-syms +2 4.4.180-94.121.1 SUSE-SU-2020:1596-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_31 2-2.1 SUSE-SU-2020:1779-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_32 1-4.5.1 SUSE-SU-2020:1596-1
Show 22 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP2 kernel-syms +2 4.4.121-92.135.1 SUSE-SU-2020:1597-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_29 10-2.1 SUSE-SU-2020:1475-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_30 9-2.1 SUSE-SU-2020:1475-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_31 8-2.1 SUSE-SU-2020:1475-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_32 7-2.1 SUSE-SU-2020:1475-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_33 5-2.1 SUSE-SU-2020:1475-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_34 2-2.1 SUSE-SU-2020:1486-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_35 1-3.5.1 SUSE-SU-2020:1597-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_33 10-2.1 SUSE-SU-2020:1475-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_34 9-2.1 SUSE-SU-2020:1475-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_35 +1 7-2.1 SUSE-SU-2020:1475-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_37 5-2.1 SUSE-SU-2020:1475-1
SLES 11 SP4 kernel-ec2 +8 3.0.101-108.114.1 SUSE-SU-2020:14393-1
SLES for SAP 15 kernel-docs +5 4.12.14-150.52.1 SUSE-SU-2020:1663-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.16.1 SUSE-SU-2020:1587-1
SLES for SAP 12 SP5 kernel-syms +2 4.12.14-122.23.1 SUSE-SU-2020:1602-1
SLES for SAP 12 SP4 kernel-azure +2 4.12.14-6.43.1 SUSE-SU-2020:1603-1
SLES for SAP 12 SP4 kernel-syms +2 4.12.14-95.54.1 SUSE-SU-2020:1605-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.180-94.121.1 SUSE-SU-2020:1596-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_25 +1 9-2.1 SUSE-SU-2020:1475-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_27 +1 7-2.1 SUSE-SU-2020:1475-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_29 5-2.1 SUSE-SU-2020:1475-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_30 4-2.1 SUSE-SU-2020:1475-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_31 2-2.1 SUSE-SU-2020:1779-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_32 1-4.5.1 SUSE-SU-2020:1596-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.135.1 SUSE-SU-2020:1597-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_29 10-2.1 SUSE-SU-2020:1475-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_30 9-2.1 SUSE-SU-2020:1475-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_31 8-2.1 SUSE-SU-2020:1475-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_32 7-2.1 SUSE-SU-2020:1475-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_33 5-2.1 SUSE-SU-2020:1475-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_34 2-2.1 SUSE-SU-2020:1486-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_35 1-3.5.1 SUSE-SU-2020:1597-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_33 10-2.1 SUSE-SU-2020:1475-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_34 9-2.1 SUSE-SU-2020:1475-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_35 +1 7-2.1 SUSE-SU-2020:1475-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_37 5-2.1 SUSE-SU-2020:1475-1
SLE Real Time 12 SP5 kernel-rt +3 4.12.14-10.13.1 SUSE-SU-2020:2478-1
SLE Real Time 12 SP4 kernel-rt +3 4.12.14-8.23.1 SUSE-SU-2020:2156-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-197.45.1 SUSE-SU-2020:1599-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_0 11-31.2 SUSE-SU-2020:1475-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_1 10-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_11 2-2.1 SUSE-SU-2020:1452-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_12 1-3.5.1 SUSE-SU-2020:1599-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_2 9-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_3 +1 7-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_5 +1 6-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_7 +1 4-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_9 +1 3-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 15 kernel-default 4.12.14-150.52.1 SUSE-SU-2020:1663-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_10 9-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_11 8-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_12 +1 7-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_14 +1 6-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_16 +1 4-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_18 1-1.5.1 SUSE-SU-2020:1663-1
SLE Live Patching 12 SP5 kernel-default 4.12.14-122.23.1 SUSE-SU-2020:1602-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_0 4-9.1 SUSE-SU-2020:1475-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_1 +1 4-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_3 3-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_4 2-2.1 SUSE-SU-2020:1452-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_5 1-8.3.1 SUSE-SU-2020:1602-1
SLE Live Patching 12 SP4 kernel-default 4.12.14-95.54.1 SUSE-SU-2020:1605-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_10 +1 4-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_12 3-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_13 2-2.1 SUSE-SU-2020:1452-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_14 1-6.3.1 SUSE-SU-2020:1605-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_4 9-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_5 8-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_6 +1 7-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_8 6-2.1 SUSE-SU-2020:1475-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_9 5-2.1 SUSE-SU-2020:1475-1
SLE HPC 15 kernel-docs +5 4.12.14-150.52.1 SUSE-SU-2020:1663-1
SUSE Real Time Module 15 SP1 kernel-rt +3 4.12.14-14.28.1 SUSE-SU-2020:2487-1
SUSE OpenStack Cloud Crowbar 8 kernel-syms +2 4.4.180-94.121.1 SUSE-SU-2020:1596-1
SUSE OpenStack Cloud Crowbar 8 kgraft-patch-SLE12-SP3_Update_32 1-4.5.1 SUSE-SU-2020:1596-1
SUSE OpenStack Cloud 8 kernel-syms +2 4.4.180-94.121.1 SUSE-SU-2020:1596-1
SUSE OpenStack Cloud 8 kgraft-patch-SLE12-SP3_Update_32 1-4.5.1 SUSE-SU-2020:1596-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.135.1 SUSE-SU-2020:1597-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_35 1-3.5.1 SUSE-SU-2020:1597-1
SUSE HPE Helion OpenStack 8 kernel-syms +2 4.4.180-94.121.1 SUSE-SU-2020:1596-1
SUSE HPE Helion OpenStack 8 kgraft-patch-SLE12-SP3_Update_32 1-4.5.1 SUSE-SU-2020:1596-1
SUSE Enterprise Storage 5 kernel-syms +2 4.4.180-94.121.1 SUSE-SU-2020:1596-1
SUSE Enterprise Storage 5 kgraft-patch-SLE12-SP3_Update_32 1-4.5.1 SUSE-SU-2020:1596-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.1 kernel-docs 4.12.14-lp151.28.52.2 openSUSE-SU-2020:0801-1
openSUSE Leap 15.1 kernel-obs-qa +1 4.12.14-lp151.28.52.3 openSUSE-SU-2020:0801-1
openSUSE Leap 15.1 kernel-syms +5 4.12.14-lp151.28.52.1 openSUSE-SU-2020:0801-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 perf +19 4.18.0-193.13.2.el8_2 ELSA-2020-3010
Oracle Linux 7 kernel-uek +5 4.1.12-124.47.3.el7uek ELSA-2021-9030, ELSA-2020-5755, ELSA-2020-5714
Oracle Linux 7 kernel-uek-tools +3 4.14.35-1902.304.6.el7uek ELSA-2020-5755, ELSA-2020-5714
Oracle Linux 7 perf +12 3.10.0-1127.18.2.el7 ELSA-2020-5755, ELSA-2020-5714, ELSA-2020-3220

Advisories 39

References