What’s Vulnerable › Vulnerabilities
CVE-2019-3846
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 5.9% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-06-03 · updated 2026-06-17
- Weakness: CWE-122
Description
A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.
Affected products
- Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 19.04
- Debian Linux: 8.0, 9.0
- Fedoraproject Fedora: 29, 30
- Linux kernel: from 3.0 before 3.16.70; from 3.17 before 4.4.186; from 4.5 before 4.9.186; from 4.10 before 4.14.134; from 4.15 before 4.19.59; from 4.20 before 5.1.18 — fixed in 3.16.70, 4.14.134, 4.19.59, 4.4.186, 4.9.186, 5.1.18
- NetApp A700S Firmware: all versions
- NetApp Active Iq Unified Manager For Vmware Vsphere: from 9.5
- NetApp Cn1610 Firmware: all versions
- NetApp H610S Firmware: all versions
- NetApp Hci Management Node: all versions
- NetApp Solidfire: all versions
- openSUSE Leap: 15.0, 15.1, 42.3
- Red Hat Enterprise Linux: 6.0, 7.0, 8.0
How to fix
Upgrade to a fixed version: Linux kernel 3.16.70, 4.14.134, 4.19.59, 4.4.186. Check the vendor advisory for mitigations.
References
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html
- http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
- http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html
- http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
- https://access.redhat.com/errata/RHSA-2019:2703
- https://access.redhat.com/errata/RHSA-2019:2741
- https://access.redhat.com/errata/RHSA-2019:3055
- https://access.redhat.com/errata/RHSA-2019:3076
- https://access.redhat.com/errata/RHSA-2019:3089
- https://access.redhat.com/errata/RHSA-2020:0174
Get alerted when CVE-2019-3846 or the next vulnerability affects your stack