$ cve CVE-2019-14901 JSON

CVE-2019-14901

9.8

CRITICAL · CVSS 3.1 · EPSS 16.5% (pctl 97)

Patch early

EPSS 16.5% — above the 10% action threshold.

Description

A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.

Scoring

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	16.47% — more likely to be exploited than 97% of all CVEs
Weakness	CWE-122
On CISA KEV	no
Public exploit	none known
Published	2019-11-29
Last modified	2026-06-17

Affected (4)

Vendor	Product
canonical	ubuntu linux
debian	debian linux
fedoraproject	fedora
linux	linux kernel

References

→ the Explorer · watch your stack · NVD