CVE-2019-3846

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is caused by a buffer overflow in the mwifiex update bss desc with ie function in the Linux kernel, specifically in the marvell/mwifiex/scan.c file. This can be exploited by a remote attacker to potentially escalate privileges, cause a denial of service, or execute arbitrary code. The vulnerability can be triggered when connecting to a malicious wireless network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.