CVE-2019-3846

Published: 03 June 2019

A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.

From the Ubuntu security team

It was discovered that the Marvell Wireless LAN device driver in the Linux kernel did not properly validate the BSS descriptor. A local attacker could possibly use this to cause a denial of service (system crash) or possibly execute arbitrary code.

Priority

Medium

CVSS 3 base score: 8.8

Status

Package Release Status
linux
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (4.15.0-58.64)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (4.4.0-159.187)
Ubuntu 14.04 ESM (Trusty Tahr) Ignored
(was needs-triage ESM criteria)
Patches:
Introduced by 5e6e3a92b9a4c9416b17f468fa5c7fa2233b8b4e
Fixed by 13ec7f10b87f5fc04c4ccbd491c94c7980236a74
linux-aws
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (4.15.0-1047.49)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (4.4.0-1090.101)
Ubuntu 14.04 ESM (Trusty Tahr)
Released (4.4.0-1054.58)
linux-aws-5.0
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Not vulnerable
(5.0.0-1021.24~18.04.1)
Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-aws-hwe
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus)
Released (4.15.0-1047.49~16.04.1)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-azure
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Not vulnerable
(CONFIG_MWIFIEX is not enabled)
Ubuntu 16.04 ESM (Xenial Xerus) Not vulnerable
(CONFIG_MWIFIEX is not enabled)
Ubuntu 14.04 ESM (Trusty Tahr) Ignored
(was needs-triage ESM criteria)
linux-azure-5.3
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Not vulnerable
(5.3.0-1007.8~18.04.1)
Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-azure-edge
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Not vulnerable
(CONFIG_MWIFIEX is not enabled)
Ubuntu 16.04 ESM (Xenial Xerus) Not vulnerable
(CONFIG_MWIFIEX is not enabled)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-euclid
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Ignored
(was needs-triage now end-of-life)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-flo
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Ignored
(abandoned)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-gcp
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (4.15.0-1040.42)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (4.15.0-1040.42~16.04.1)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-gcp-5.3
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Not vulnerable
(5.3.0-1008.9~18.04.1)
Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-gcp-edge
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (4.15.0-1040.42)
Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-gke
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Ignored
(end-of-life)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-gke-4.15
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (4.15.0-1040.42)
Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-gke-5.0
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Not vulnerable
(5.0.0-1013.13~18.04.1)
Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-goldfish
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Ignored
(end-of-life)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-grouper
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-hwe
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (5.0.0-25.26~18.04.1)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (4.15.0-58.64~16.04.1)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-hwe-edge
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Ignored
(was pending \[5.3.0-19.20~18.04.2\] now end-of-life)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (4.15.0-58.64~16.04.1)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-kvm
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Not vulnerable
(CONFIG_MWIFIEX is not enabled)
Ubuntu 16.04 ESM (Xenial Xerus) Not vulnerable
(CONFIG_MWIFIEX is not enabled)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-lts-trusty
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-lts-utopic
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-lts-vivid
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-lts-wily
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-lts-xenial
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr)
Released (4.4.0-164.192~14.04.1)
linux-maguro
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-mako
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Ignored
(abandoned)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-manta
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-oem
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (4.15.0-1050.57)
Ubuntu 16.04 ESM (Xenial Xerus) Ignored
(was needs-triage now end-of-life)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-oem-5.4
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Does not exist

Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-oem-osp1
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (5.0.0-1018.20)
Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-oracle
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (4.15.0-1021.23)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (4.15.0-1021.23~16.04.1)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-oracle-5.0
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Not vulnerable
(5.0.0-1007.12~18.04.1)
Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-raspi2
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (4.15.0-1043.46)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (4.4.0-1118.127)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-raspi2-5.3
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver) Not vulnerable
(5.3.0-1017.19~18.04.1)
Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

linux-snapdragon
Launchpad, Ubuntu, Debian
Upstream
Released (5.2~rc6)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (4.15.0-1060.66)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (4.4.0-1122.128)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist