What’s Vulnerable › Vulnerabilities

CVE-2019-14815

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-25 · updated 2026-06-17
• Weakness: CWE-122

Description

A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.

Affected products

• Linux kernel: from 4.10 before 4.14.146; from 4.15 before 4.19.75; from 4.20 before 5.2.17 — fixed in 4.14.146, 4.19.75, 5.2.17
• NetApp Altavault: all versions
• NetApp Baseboard Management Controller: all versions
• NetApp Hci: all versions
• NetApp Solidfire: all versions
• NetApp Solidfire Baseboard Management Controller Firmware: all versions
• NetApp Steelstore: all versions
• RedHat Codeready Linux Builder Eus: 8.1, 8.2, 8.4, 8.6
• RedHat Codeready Linux Builder For Power Little Endian Eus: 8.1, 8.2, 8.4, 8.6
• Red Hat Enterprise Linux: 5, 6.0, 7.0, 8.0
• RedHat Enterprise Linux For Ibm Z Systems (Structure A): 7_s390x
• RedHat Enterprise Linux For Ibm Z Systems Eus: 8.1, 8.2, 8.4, 8.6
• RedHat Enterprise Linux For Real Time: 8
• RedHat Enterprise Linux For Real Time For Nfv: 8
• RedHat Enterprise Linux For Real Time For Nfv Tus: 8.2, 8.4, 8.6
• RedHat Enterprise Linux For Real Time Tus: 8.2, 8.4, 8.6
• RedHat Enterprise Linux Server Aus: 8.2, 8.4, 8.6
• RedHat Enterprise Linux Server Tus: 8.2, 8.4, 8.6

How to fix

Upgrade to a fixed version: Linux kernel 4.14.146, 4.19.75, 5.2.17. Check the vendor advisory for mitigations.

References

• https://access.redhat.com/errata/RHSA-2020:0174
• https://access.redhat.com/errata/RHSA-2020:0328
• https://access.redhat.com/errata/RHSA-2020:0339
• https://access.redhat.com/security/cve/cve-2019-14815
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14815
• https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3a
• https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
• https://lore.kernel.org/linux-wireless/20190828020751.13625-1-huangwenabc%40gmail.com
• https://security.netapp.com/advisory/ntap-20200103-0001/
• https://www.openwall.com/lists/oss-security/2019/08/28/1
• https://access.redhat.com/errata/RHSA-2020:0174
• https://access.redhat.com/errata/RHSA-2020:0328

Get alerted when CVE-2019-14815 or the next vulnerability affects your stack