CVE-2019-14816

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3

Description The issue is related to a heap-based buffer overflow in the Marvell Wi-Fi chip driver of the Linux kernel. This allows local users to cause a denial of service, resulting in a system crash, or possibly execute arbitrary code. The vulnerability is associated with errors in the mwifiex update vs ie() function, which can be exploited to achieve these outcomes.

Recommendations For Linux kernel versions prior to 5.3, consider disabling the Marvell Wi-Fi chip driver as a temporary workaround until a patch is available. Restrict access to the vulnerable mwifiex update vs ie() function to minimize the risk of exploitation. Update to version 5.3 or later to resolve the issue.