CVE-2019-14816

Name: CVE-2019-14816
Creator: NVD / NIST
Published: 2019-09-20T19:15:11.767+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 7.8/10EPSS 0.91%

Last modified Jun 17, 2026

CVE-2019-14816 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.. EPSS estimates a 0.91% chance of exploitation in the next 30 days.

Description

There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.

Metrics

CVSS 3.1

7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

0.91%

55.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Linux	Linux Kernel	>= 3.6, < 3.16.74
Linux	Linux Kernel	>= 3.17, < 4.4.194
Linux	Linux Kernel	>= 4.5, < 4.9.194
Linux	Linux Kernel	>= 4.10, < 4.14.146
Linux	Linux Kernel	>= 4.15, < 4.19.75
Linux	Linux Kernel	>= 4.20, < 5.2.17
Redhat	Virtualization	4.0
Redhat	Enterprise Linux	5.0
Redhat	Enterprise Linux	6.0
Redhat	Enterprise Linux	6.4
Redhat	Enterprise Linux	7.0
Redhat	Enterprise Linux	7.6
Redhat	Enterprise Linux	8.0
Redhat	Enterprise Linux Compute Node Eus	7.6
Redhat	Enterprise Linux Eus	7.6
Redhat	Enterprise Linux Eus	7.7
Redhat	Enterprise Linux Eus	8.1
Redhat	Enterprise Linux Eus	8.2
Redhat	Enterprise Linux Eus	8.4
Redhat	Enterprise Linux For Power Big Endian Eus	7.6_ppc64
Redhat	Enterprise Linux For Real Time	7
Redhat	Enterprise Linux For Real Time	8
Redhat	Enterprise Linux For Real Time For Nfv	7
Redhat	Enterprise Linux For Real Time For Nfv	8
Redhat	Enterprise Linux For Real Time For Nfv Tus	8.2
Redhat	Enterprise Linux For Real Time For Nfv Tus	8.4
Redhat	Enterprise Linux For Real Time Tus	8.2
Redhat	Enterprise Linux For Real Time Tus	8.4
Redhat	Enterprise Linux Server	7.6
Redhat	Enterprise Linux Server	8.0
Redhat	Enterprise Linux Server Aus	7.2
Redhat	Enterprise Linux Server Aus	7.3
Redhat	Enterprise Linux Server Aus	7.6
Redhat	Enterprise Linux Server Aus	8.2
Redhat	Enterprise Linux Server Aus	8.4
Redhat	Enterprise Linux Server Tus	7.3
Redhat	Enterprise Linux Server Tus	7.6
Redhat	Enterprise Linux Server Tus	8.2
Redhat	Enterprise Linux Server Tus	8.4
Redhat	Enterprise Linux Tus	7.7
Redhat	Messaging Realtime Grid	2.0
Redhat	Virtualization	4.2
Debian	Debian Linux	8.0
Fedoraproject	Fedora	29
Fedoraproject	Fedora	30
Netapp	Data Availability Services	All versions
Netapp	Hci Management Node	All versions
Netapp	Service Processor	All versions
Netapp	Solidfire	All versions
Netapp	Steelstore Cloud Integrated Storage	All versions

Showing 50 of 71 affected configurations. See NVD for the full list.

References

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.htmlMailing List, Third Party Advisory
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.htmlThird Party Advisory, VDB Entry
http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2019/08/28/1Exploit, Mailing List, Patch, Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0174Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0204Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0328Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0339Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0374Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0375Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0653Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0661Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0664Third Party Advisory
https://access.redhat.com/security/cve/cve-2019-14816Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14816Exploit, Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/09/msg00025.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/Issue Tracking, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/Issue Tracking, Third Party Advisory
https://seclists.org/bugtraq/2019/Nov/11Mailing List, Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20191031-0005/Third Party Advisory
https://usn.ubuntu.com/4157-1/Third Party Advisory
https://usn.ubuntu.com/4157-2/Third Party Advisory
https://usn.ubuntu.com/4162-1/Third Party Advisory
https://usn.ubuntu.com/4162-2/Third Party Advisory
https://usn.ubuntu.com/4163-1/Third Party Advisory
https://usn.ubuntu.com/4163-2/Third Party Advisory
https://www.openwall.com/lists/oss-security/2019/08/28/1Exploit, Mailing List, Patch, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.htmlMailing List, Third Party Advisory
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.htmlThird Party Advisory, VDB Entry
http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2019/08/28/1Exploit, Mailing List, Patch, Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0174Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0204Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0328Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0339Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0374Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0375Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0653Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0661Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0664Third Party Advisory
https://access.redhat.com/security/cve/cve-2019-14816Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14816Exploit, Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/09/msg00025.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/Issue Tracking, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/Issue Tracking, Third Party Advisory
https://seclists.org/bugtraq/2019/Nov/11Mailing List, Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20191031-0005/Third Party Advisory
https://usn.ubuntu.com/4157-1/Third Party Advisory
https://usn.ubuntu.com/4157-2/Third Party Advisory
https://usn.ubuntu.com/4162-1/Third Party Advisory
https://usn.ubuntu.com/4162-2/Third Party Advisory
https://usn.ubuntu.com/4163-1/Third Party Advisory
https://usn.ubuntu.com/4163-2/Third Party Advisory
https://www.openwall.com/lists/oss-security/2019/08/28/1Exploit, Mailing List, Patch, Third Party Advisory

Timeline

Published: Sep 20, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-14816?

How severe is CVE-2019-14816?

CVE-2019-14816 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.91% probability of exploitation in the next 30 days.

How do I fix CVE-2019-14816?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-14816?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST