FlawAtlas
Search the atlas
SUSE-SU-2020:0204-1 Not scored

Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP3)

This update for the Linux Kernel 4.4.180-94_100 fixes several issues. The following security issues were fixed: - CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157). - CVE-2019-14897: A stack-based buffer overflow was found in the Marvell WiFi chip driver. An attacker was able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bsc#1157155).

Exploit probability Not scored
Published January 22, 2020
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Server 12 SP3-LTSS kgraft-patch-SLE12-SP3_Update_25
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-SLE12-SP2_Update_33
SUSE:Linux Enterprise Server 12 SP1-LTSS kgraft-patch-SLE12-SP1_Update_33
SUSE:Linux Enterprise Server 12 SP3-LTSS kgraft-patch-SLE12-SP3_Update_28
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 kgraft-patch-SLE12-SP3_Update_25
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-SLE12-SP2_Update_29
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 kgraft-patch-SLE12-SP3_Update_30
SUSE:Linux Enterprise Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_1
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 kgraft-patch-SLE12-SP1_Update_34
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 kgraft-patch-SLE12-SP1_Update_33
SUSE:Linux Enterprise Server 12 SP3-LTSS kgraft-patch-SLE12-SP3_Update_23
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 kgraft-patch-SLE12-SP3_Update_24
SUSE:Linux Enterprise Server 12 SP2-LTSS kgraft-patch-SLE12-SP2_Update_28
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 kgraft-patch-SLE12-SP3_Update_23
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 kgraft-patch-SLE12-SP1_Update_35
SUSE:Linux Enterprise Server 12 SP1-LTSS kgraft-patch-SLE12-SP1_Update_36
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 kgraft-patch-SLE12-SP3_Update_27
SUSE:Linux Enterprise Server 12 SP3-LTSS kgraft-patch-SLE12-SP3_Update_24
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 kgraft-patch-SLE12-SP3_Update_26
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-SLE12-SP2_Update_31
SUSE:Linux Enterprise Server 12 SP1-LTSS kgraft-patch-SLE12-SP1_Update_37
SUSE:Linux Enterprise Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_8
SUSE:Linux Enterprise Server 12 SP2-LTSS kgraft-patch-SLE12-SP2_Update_30
SUSE:Linux Enterprise Server 12 SP1-LTSS kgraft-patch-SLE12-SP1_Update_35
SUSE:Linux Enterprise Server 12 SP1-LTSS kgraft-patch-SLE12-SP1_Update_34
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-SLE12-SP2_Update_27
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-SLE12-SP2_Update_30
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 kgraft-patch-SLE12-SP1_Update_36
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 kgraft-patch-SLE12-SP3_Update_29
SUSE:Linux Enterprise Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_11
SUSE:Linux Enterprise Server 12 SP3-LTSS kgraft-patch-SLE12-SP3_Update_26
SUSE:Linux Enterprise Server 12 SP3-LTSS kgraft-patch-SLE12-SP3_Update_27
SUSE:Linux Enterprise Server 12 SP2-LTSS kgraft-patch-SLE12-SP2_Update_29
SUSE:Linux Enterprise Server 12 SP3-LTSS kgraft-patch-SLE12-SP3_Update_30
SUSE:Linux Enterprise Server 12 SP2-LTSS kgraft-patch-SLE12-SP2_Update_33
SUSE:Linux Enterprise Server 12 SP2-LTSS kgraft-patch-SLE12-SP2_Update_27
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 kgraft-patch-SLE12-SP3_Update_28
SUSE:Linux Enterprise Server 12 SP2-LTSS kgraft-patch-SLE12-SP2_Update_32
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 kgraft-patch-SLE12-SP1_Update_37
SUSE:Linux Enterprise Server 12 SP3-LTSS kgraft-patch-SLE12-SP3_Update_29
SUSE:Linux Enterprise Server 12 SP2-LTSS kgraft-patch-SLE12-SP2_Update_31
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-SLE12-SP2_Update_32
SUSE:Linux Enterprise Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_2
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-SLE12-SP2_Update_28
SUSE:Linux Enterprise Live Patching 15 kernel-livepatch-SLE15_Update_17

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2020:0204-1

This update for the Linux Kernel 4.4.180-94_100 fixes several issues. The following security issues were fixed: - CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157). - CVE-2019-14897: A stack-based buffer overflow was found in the Marvell WiFi chip driver. An attacker was able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bsc#1157155).

View original source

05 / REFERENCES

Further evidence