Ubuntu 19.04 : Linux kernel vulnerabilities (USN-4157-1)

Wen Huang discovered that the Marvell Wi-Fi device driver in the Linux kernel did not properly perform bounds checking, leading to a heap overflow. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-14814, CVE-2019-14815,...

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1482)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An information-leak vulnerability was found in the kernel when it truncated a file to a smaller size which consisted o...

CVE-2018-14745

Buffer overflow in protgetringspace in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to overwrite kernel memory due to improper validation of the ring buffer read pointer. The Samsung ID is...

Buffer overflow

Buffer overflow in protgetringspace in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to overwrite kernel memory due to improper validation of the ring buffer read pointer. The Samsung ID is...

Debian DLA-1715-1 : linux-4.9 security update (Spectre)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2017-18249 A race condition was discovered in the disk space allocator of F2FS. A user with access to an F2FS volume could use this to cause a deni...

CVE-2018-14745

Buffer overflow in protgetringspace in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to overwrite kernel memory due to improper validation of the ring buffer read pointer. The Samsung ID is...

CVE-2018-14745

CVE-2018-14745 affects the bcmdhd4358 Wi‑Fi driver in the Samsung Galaxy S6 (SM-G920F). The flaw is a buffer overflow in prot_get_ring_space caused by improper validation of the ring buffer read pointer, enabling an attacker who already has code execution on the Wi‑Fi chip to overwrite kernel mem...

Buffer overflow

Buffer overflow in dhdbusflowringflushresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory accesses. The Samsung ID is...

Null pointer dereference

A NULL pointer dereference in dhdprottxdatawriteflush in drivers/net/wireless/bcmdhd4358/dhdmsgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause the device to reboot. The Samsung ID is...

Buffer overflow

Buffer overflow in dhdbusflowringdeleteresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

CVE-2018-14853

A NULL pointer dereference in dhdprottxdatawriteflush in drivers/net/wireless/bcmdhd4358/dhdmsgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause the device to reboot. The Samsung ID is...

CVE-2018-14852

Out-of-bounds array access in dhdrxframe in drivers/net/wireless/bcmdhd4358/dhdlinux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause invalid accesses to operating system memory due to...

CVE-2018-14854

Buffer overflow in dhdbusflowringdeleteresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

CVE-2018-14856

Buffer overflow in dhdbusflowringcreateresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

CVE-2018-14855

Buffer overflow in dhdbusflowringflushresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory accesses. The Samsung ID is...

Buffer overflow

Buffer overflow in dhdbusflowringcreateresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

CVE-2018-14855

The CVE refers to a buffer overflow in the bcmdhd4358 Wi‑Fi driver (Samsung Galaxy S6) specifically in the dhd_pcie.c functions dhd_bus_flow_ring_flush_response and related flow/control ring handling. Affected device: Galaxy S6 with the bcmdhd4358 driver (SM-G920F/G920FXXU5EQH7). Root cause: buff...

CVE-2018-14852

CVE-2018-14852 concerns the Samsung Galaxy S6 SM-G920F with the bcmdhd4358 Wi‑Fi driver. The issue is an out-of-bounds array access in the dhd_rx_frame function (drivers/net/wireless/bcmdhd4358/dhd_linux.c) caused by improper validation of the network interface index reported by the Wi‑Fi chip fi...

CVE-2018-14856

Buffer overflow in dhdbusflowringcreateresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

CVE-2018-14854

CVE-2018-14854 concerns a buffer overflow in the bcmdhd4358 Wi‑Fi driver (drivers/net/wireless/bcmdhd4358/dhd_pcie.c) on the Samsung Galaxy S6 (SM-G920F, firmware G920FXXU5EQH7). The flaw occurs in the dhd_bus_flow_ring_delete_response path and allows an attacker with code execution on the Wi‑Fi ...