CVE-2019-17666

HIGH

8.8

CVSS Score

Published: October 17, 2019 at 01:47 AM UTC

Updated: June 17, 2026 at 02:24 AM UTC

3 products affected across 3 vendorsLinux KernelDebian LinuxUbuntu Linux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 3%

Description

rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

14.04 16.04 18.04 19.04 19.10

Debian Linux · Debiandrupal

95%

8.0

Linux Kernel · Linux

95%

v < 3.16.773.17 ≤ v < 4.4.1994.10 ≤ v < 4.14.1524.15 ≤ v < 4.19.824.20 ≤ v < 5.24.5 ≤ v < 4.9.1995.3 ≤ v < 5.3.9

Affected range stops below 3.16.77, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.14.152, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.82, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.4.199, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9.199, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.2, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.3.9, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (19)

Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory

Source: [email protected]

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html

Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory

Source: [email protected]

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html