CVE-2019-14895

CRITICAL

9.8

CVSS Score

Published: November 29, 2019 at 01:50 PM UTC

Updated: June 17, 2026 at 02:19 AM UTC

6 products affected across 6 vendorsLinux KernelDebian LinuxFedora

Using kernel by Red Hat?

Get instant alerts when new vulnerabilities affect kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.8

Exploit prediction

EPSS 8%

Description

A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

14.04 16.04 18.04 19.04 19.10

Debian Linux · Debiandrupal

95%

8.0

Fedora · Fedora Projectrpm

95%

30 31

Linux Kernel · Linux

95%

3.17 ≤ v < 4.4.2103.7 ≤ v < 3.16.814.10 ≤ v < 4.14.1654.15 ≤ v < 4.19.964.20 ≤ v < 5.4.124.5 ≤ v < 4.9.210

Affected range stops below 3.16.81, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.14.165, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.96, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.4.210, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9.210, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.4.12, so it looks safe — our inference, not a vendor statement

Leap · openSUSEdrupal

95%

15.1

Kernel · Red Hat

60%

v < 4.18.0

Affected range stops below 4.18.0, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (26)

Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory

Source: [email protected]

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html

x_refsource_MISCThird Party AdvisoryVDB Entry

Source: [email protected]

http://packetstormsecurity.com/files/155879/Kernel-Live-Patch-Security-Notice-LSN-0061-1.html

x_refsource_MISCThird Party AdvisoryVDB Entry

Source: [email protected]

http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html