ID

VAR-201909-1526

CVE

CVE-2019-14816

TITLE

Linux kernel Buffer error vulnerability

DESCRIPTION

There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code. 8.0) - aarch64, noarch, ppc64le, s390x, x86_64 3. Bug Fix(es): * Backport TCP follow-up for small buffers (BZ#1739184) * TCP performance regression after CVE-2019-11478 bug fix (BZ#1743170) * RHEL8.0 - bnx2x link down, caused by transmit timeouts during load test (Marvell/Cavium/QLogic) (L3:) (BZ#1743548) * block: blk-mq improvement (BZ#1780567) * RHEL8.0 - Regression to RHEL7.6 by changing force_latency found during RHEL8.0 validation for SAP HANA on POWER (BZ#1781111) * blk-mq: overwirte performance drops on real MQ device (BZ#1782183) * RHEL8: creating vport takes lot of memory i.e 2GB per vport which leads to drain out system memory quickly. (BZ#1782705) 4. ========================================================================= Ubuntu Security Notice USN-4162-2 October 23, 2019 linux-azure vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 ESM Summary: Several security issues were fixed in the Linux kernel. This update provides the corresponding updates for the Linux kernel for Microsoft Azure Cloud systems for Ubuntu 14.04 ESM. It was discovered that the RSI 91x Wi-Fi driver in the Linux kernel did not did not handle detach operations correctly, leading to a use-after-free vulnerability. (CVE-2019-14814, CVE-2019-14815, CVE-2019-14816) Matt Delco discovered that the KVM hypervisor implementation in the Linux kernel did not properly perform bounds checking when handling coalesced MMIO write operations. A local attacker with write access to /dev/kvm could use this to cause a denial of service (system crash). (CVE-2019-14821) Hui Peng and Mathias Payer discovered that the USB audio driver for the Linux kernel did not properly validate device meta data. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2019-15117) Hui Peng and Mathias Payer discovered that the USB audio driver for the Linux kernel improperly performed recursion while handling device meta data. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2019-15118) It was discovered that the Technisat DVB-S/S2 USB device driver in the Linux kernel contained a buffer overread. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2019-15505) Brad Spengler discovered that a Spectre mitigation was improperly implemented in the ptrace susbsystem of the Linux kernel. A local attacker could possibly use this to expose sensitive information. (CVE-2019-15902) It was discovered that the SMB networking file system implementation in the Linux kernel contained a buffer overread. An attacker could use this to expose sensitive information (kernel memory). (CVE-2019-15918) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 ESM: linux-image-4.15.0-1061-azure 4.15.0-1061.66~14.04.1 linux-image-azure 4.15.0.1061.47 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. 7) - aarch64, noarch, ppc64le 3. Bug Fix(es): * Kernel panic on job cleanup, related to SyS_getdents64 (BZ#1702057) * Kernel modules generated incorrectly when system is localized to non-English language (BZ#1705285) * RHEL-Alt-7.6 - Fixup tlbie vs store ordering issue on POWER9 (BZ#1756270) 4. Bugs fixed (https://bugzilla.redhat.com/): 1581650 - CVE-2018-3693 Kernel: speculative bounds check bypass store 1641878 - CVE-2018-18559 kernel: Use-after-free due to race condition in AF_PACKET implementation 1678685 - CVE-2019-8912 kernel: af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr 1703063 - CVE-2019-11487 kernel: Count overflow in FUSE request leading to use-after-free issues. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security and bug fix update Advisory ID: RHSA-2020:1266-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:1266 Issue date: 2020-04-01 CVE Names: CVE-2019-14816 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) - x86_64 Red Hat Enterprise Linux Server EUS (v. 7.5) - noarch, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional EUS (v. 7.5) - ppc64, ppc64le, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver (CVE-2019-14816) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Slow console output with ast (Aspeed) graphics driver (BZ#1780145) * core: backports from upstream (BZ#1794373) * System Crash on vport creation (NPIV on FCoE) (BZ#1796362) * [GSS] Can't access the mount point due to possible blocking of i/o on rbd (BZ#1796432) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1744149 - CVE-2019-14816 kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver 6. Package List: Red Hat Enterprise Linux ComputeNode EUS (v. 7.5): Source: kernel-3.10.0-862.51.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-862.51.1.el7.noarch.rpm kernel-doc-3.10.0-862.51.1.el7.noarch.rpm x86_64: kernel-3.10.0-862.51.1.el7.x86_64.rpm kernel-debug-3.10.0-862.51.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-862.51.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.51.1.el7.x86_64.rpm kernel-devel-3.10.0-862.51.1.el7.x86_64.rpm kernel-headers-3.10.0-862.51.1.el7.x86_64.rpm kernel-tools-3.10.0-862.51.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-862.51.1.el7.x86_64.rpm perf-3.10.0-862.51.1.el7.x86_64.rpm perf-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm python-perf-3.10.0-862.51.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5): x86_64: kernel-debug-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.51.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-862.51.1.el7.x86_64.rpm perf-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm Red Hat Enterprise Linux Server EUS (v. 7.5): Source: kernel-3.10.0-862.51.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-862.51.1.el7.noarch.rpm kernel-doc-3.10.0-862.51.1.el7.noarch.rpm ppc64: kernel-3.10.0-862.51.1.el7.ppc64.rpm kernel-bootwrapper-3.10.0-862.51.1.el7.ppc64.rpm kernel-debug-3.10.0-862.51.1.el7.ppc64.rpm kernel-debug-debuginfo-3.10.0-862.51.1.el7.ppc64.rpm kernel-debug-devel-3.10.0-862.51.1.el7.ppc64.rpm kernel-debuginfo-3.10.0-862.51.1.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-862.51.1.el7.ppc64.rpm kernel-devel-3.10.0-862.51.1.el7.ppc64.rpm kernel-headers-3.10.0-862.51.1.el7.ppc64.rpm kernel-tools-3.10.0-862.51.1.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-862.51.1.el7.ppc64.rpm kernel-tools-libs-3.10.0-862.51.1.el7.ppc64.rpm perf-3.10.0-862.51.1.el7.ppc64.rpm perf-debuginfo-3.10.0-862.51.1.el7.ppc64.rpm python-perf-3.10.0-862.51.1.el7.ppc64.rpm python-perf-debuginfo-3.10.0-862.51.1.el7.ppc64.rpm ppc64le: kernel-3.10.0-862.51.1.el7.ppc64le.rpm kernel-bootwrapper-3.10.0-862.51.1.el7.ppc64le.rpm kernel-debug-3.10.0-862.51.1.el7.ppc64le.rpm kernel-debug-debuginfo-3.10.0-862.51.1.el7.ppc64le.rpm kernel-debuginfo-3.10.0-862.51.1.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-862.51.1.el7.ppc64le.rpm kernel-devel-3.10.0-862.51.1.el7.ppc64le.rpm kernel-headers-3.10.0-862.51.1.el7.ppc64le.rpm kernel-tools-3.10.0-862.51.1.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-862.51.1.el7.ppc64le.rpm kernel-tools-libs-3.10.0-862.51.1.el7.ppc64le.rpm perf-3.10.0-862.51.1.el7.ppc64le.rpm perf-debuginfo-3.10.0-862.51.1.el7.ppc64le.rpm python-perf-3.10.0-862.51.1.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-862.51.1.el7.ppc64le.rpm s390x: kernel-3.10.0-862.51.1.el7.s390x.rpm kernel-debug-3.10.0-862.51.1.el7.s390x.rpm kernel-debug-debuginfo-3.10.0-862.51.1.el7.s390x.rpm kernel-debug-devel-3.10.0-862.51.1.el7.s390x.rpm kernel-debuginfo-3.10.0-862.51.1.el7.s390x.rpm kernel-debuginfo-common-s390x-3.10.0-862.51.1.el7.s390x.rpm kernel-devel-3.10.0-862.51.1.el7.s390x.rpm kernel-headers-3.10.0-862.51.1.el7.s390x.rpm kernel-kdump-3.10.0-862.51.1.el7.s390x.rpm kernel-kdump-debuginfo-3.10.0-862.51.1.el7.s390x.rpm kernel-kdump-devel-3.10.0-862.51.1.el7.s390x.rpm perf-3.10.0-862.51.1.el7.s390x.rpm perf-debuginfo-3.10.0-862.51.1.el7.s390x.rpm python-perf-3.10.0-862.51.1.el7.s390x.rpm python-perf-debuginfo-3.10.0-862.51.1.el7.s390x.rpm x86_64: kernel-3.10.0-862.51.1.el7.x86_64.rpm kernel-debug-3.10.0-862.51.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-862.51.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.51.1.el7.x86_64.rpm kernel-devel-3.10.0-862.51.1.el7.x86_64.rpm kernel-headers-3.10.0-862.51.1.el7.x86_64.rpm kernel-tools-3.10.0-862.51.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-862.51.1.el7.x86_64.rpm perf-3.10.0-862.51.1.el7.x86_64.rpm perf-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm python-perf-3.10.0-862.51.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional EUS (v. 7.5): ppc64: kernel-debug-debuginfo-3.10.0-862.51.1.el7.ppc64.rpm kernel-debuginfo-3.10.0-862.51.1.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-862.51.1.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-862.51.1.el7.ppc64.rpm kernel-tools-libs-devel-3.10.0-862.51.1.el7.ppc64.rpm perf-debuginfo-3.10.0-862.51.1.el7.ppc64.rpm python-perf-debuginfo-3.10.0-862.51.1.el7.ppc64.rpm ppc64le: kernel-debug-debuginfo-3.10.0-862.51.1.el7.ppc64le.rpm kernel-debug-devel-3.10.0-862.51.1.el7.ppc64le.rpm kernel-debuginfo-3.10.0-862.51.1.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-862.51.1.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-862.51.1.el7.ppc64le.rpm kernel-tools-libs-devel-3.10.0-862.51.1.el7.ppc64le.rpm perf-debuginfo-3.10.0-862.51.1.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-862.51.1.el7.ppc64le.rpm x86_64: kernel-debug-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.51.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-862.51.1.el7.x86_64.rpm perf-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.51.1.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-14816 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXoRSEtzjgjWX9erEAQhMdQ//VXn5tAbeHpRsQaS1uJocOJYJToU4t5nG ShIirQnSpZIWgFJyXG8w1zTc2mfh9eGKPnzOyF6/VDEI7OQzVl1ghY29CXrfcjtn kcMzjp4o3c9WCz9dxFveMq4reE9Vpw8+ygElu09nV33X/ZILVRCfLOa7b0yC4Jzu 2+sHZ1NaCM3dUbGJGXApmDvYnCpniqQLGZiX8sSE5A6JiEsLVvua1j/6G+u7dc93 8yYzZoh1vE0HGo+I7tFjqN6QpxwgmkjXzNOEaIeZ10GRgp2I3vEKuVdDPmuP1vqw xzaS7XyBbvHZXto+jKbfrjDHA71Gfnelu2Xrj5MTiIWyda40gliKN31/7araDKJR UMp19D4nfjYWmDdmHNJuPae2bzOlDbYk40u2efrJZUPMPYhP34oEuZqCLDqS3scs f95sSONDj1+xr6TektowYAg2OrqB+xglxtDPUfDAttKzIUUvdJmnXbRlHVsvq293 0bScgurRmQYzaVjH/7coAxd6iRWGOk4vubEjm/GhjVW5vDLMhOe3eIVfkPTxWqnR JxtGXEwtKYxVWyA0wwQGMZXahWeVHhB7tkKV8RdGlHe/b5Hls2hf+kavR9GeV4bS qcAB2mf5VQiXkiL4/vC20qKtNoGTfEVng2FHmNNYGFkf4ioisDzRK6IJENKTS/YC G0tP4LNJThc=Pjy6 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . Enhancement(s): * Selective backport: perf: Sync with upstream v4.16 (BZ#1782748) 4. Please note that the RDS protocol is blacklisted in Ubuntu by default. 8) - x86_64 3. Bug Fix(es): * kernel-rt: update RT source tree to the RHEL-8.1.z2 source tree (BZ#1780326) 4

AFFECTED PRODUCTS

CVSS

PROBLEMTYPE DATA

THREAT TYPE

local

TYPE

buffer error

PATCH

EXTERNAL IDS

REFERENCES

CREDITS

Ubuntu,Red Hat

SOURCES

LAST UPDATE DATE

2025-05-17T21:21:09.321000+00:00

SOURCES UPDATE DATE

SOURCES RELEASE DATE