CVE-2019-3846

🗓️ 03 Jun 2019 18:25:57Reported by redhatType

A flaw in mwifiex kernel module allows memory corruption and privilege escalation

Reporter	Title	Published	Views	Family All 338
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-za	25 Jul 201915:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a kernel vulnerability	7 Oct 202016:13	–	ibm
Android Security Bulletins	Pixel Update Bulletin—March 2020Stay organized with collectionsSave and categorize content based on your preferences.	2 Mar 202000:00	–	androidsecurity
BDU FSTEC	The vulnerability of the mwifiex_update_bss_desc_with_ie function in Linux kernel allows a hacker to escalate their privileges, cause service failures, or execute arbitrary code.	20 Aug 201900:00	–	bdu_fstec
Tenable Nessus	CentOS 8 : kernel (CESA-2019:2703)	29 Jan 202100:00	–	nessus
Tenable Nessus	CentOS 7 : kernel (CESA-2019:3055)	22 Oct 201900:00	–	nessus
Tenable Nessus	CentOS 7 : kernel-alt (RHSA-2020:0174)	9 Oct 202400:00	–	nessus
Tenable Nessus	Debian DLA-1823-1 : linux security update (SACK Panic) (SACK Slowness)	18 Jun 201900:00	–	nessus
Tenable Nessus	Debian DLA-1824-1 : linux-4.9 security update (SACK Panic) (SACK Slowness)	19 Jun 201900:00	–	nessus
Tenable Nessus	Debian DSA-4465-1 : linux - security update (SACK Panic) (SACK Slowness)	18 Jun 201900:00	–	nessus

NVD

Node

linux linux_kernelRange3.0–3.16.70

linux linux_kernelRange3.17–4.4.186

linux linux_kernelRange4.5–4.9.186

linux linux_kernelRange4.10–4.14.134

linux linux_kernelRange4.15–4.19.59

linux linux_kernelRange4.20–5.1.18

Node

redhat enterprise_linuxMatch6.0

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

Node

canonical ubuntu_linuxMatch14.04esm

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch19.04

Node

AND

netapp a700s_firmwareMatch-

netapp a700sMatch-

Node

AND

netapp cn1610_firmwareMatch-

netapp cn1610Match-

Node

AND

netapp h610s_firmwareMatch-

netapp h610sMatch-

Node

netapp active_iq_unified_manager_for_vmware_vsphereRange9.5≥

netapp hci_management_nodeMatch-

netapp solidfireMatch-

Node

fedoraproject fedoraMatch29

fedoraproject fedoraMatch30

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

opensuse leapMatch15.0

opensuse leapMatch15.1

opensuse leapMatch42.3

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
usn	www.usn.ubuntu.com/4118-1/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J36BIJTKEPUOZKJNHQBUZA47RQONUKOI/
packetstormsecurity	www.packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html
access	www.access.redhat.com/errata/RHSA-2019:2703
access	www.access.redhat.com/errata/RHSA-2019:3055
access	www.access.redhat.com/errata/RHSA-2019:2741
usn	www.usn.ubuntu.com/4095-2/
packetstormsecurity	www.packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
usn	www.usn.ubuntu.com/4094-1/

17 Jun 2026 02:35Current

9.1High risk

Vulners AI Score9.1

CVSS 28.3

CVSS 3.18.8

CVSS 38

EPSS0.05649