UBUNTU-CVE-2019-16746

Advisory lineage Upstream: 1 Downstream: 3
Published: 24 Sept 2019, 06:15
Last modified:03 Jun 2026, 13:33

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.8 CRITICAL
3.1 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 Sept 2019, 06:15
Published
Vulnerability first disclosed
03 Jun 2026, 13:33
Last Modified
Vulnerability information updated

Description

An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow.

CVSS Metrics

  • v3.1CRITICALScore: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Systems

  • ubuntulinux

    all | < 4.4.0-168.197 | < 4.15.0-72.81

  • ubuntulinux-aws

    < 4.4.0-1058.62 | < 4.4.0-1098.109 | < 4.15.0-1056.58

  • ubuntulinux-aws-5.0

    < 5.0.0-1022.25~18.04.1

  • ubuntulinux-aws-fips

    < 4.15.0-2018.18 | all

  • ubuntulinux-aws-hwe

    < 4.15.0-1056.58~16.04.1

  • ubuntulinux-azure

    < 4.15.0-1064.69~14.04.1 | < 4.15.0-1064.69 | < 5.0.0-1027.29~18.04.1

  • ubuntulinux-azure-edge

    all

  • ubuntulinux-azure-fde

    all

  • ubuntulinux-azure-fips

    < 4.15.0-2006.7 | all

  • ubuntulinux-bluefield

    all

  • ubuntulinux-fips

    < 4.4.0-1025.30 | all

  • ubuntulinux-gcp

    < 4.15.0-1050.53 | < 5.0.0-1026.27~18.04.1

  • ubuntulinux-gcp-edge

    all

  • ubuntulinux-gcp-fips

    all

  • ubuntulinux-gke

    all

  • ubuntulinux-gke-4.15

    < 4.15.0-1049.52

  • ubuntulinux-gke-5.0

    < 5.0.0-1026.27~18.04.2

  • ubuntulinux-hwe

    < 4.15.0-72.81~16.04.1 | < 5.0.0-37.40~18.04.1

  • ubuntulinux-hwe-edge

    all | all

  • ubuntulinux-intel-iot-realtime

    all

  • ubuntulinux-kvm

    < 4.4.0-1062.69 | < 4.15.0-1051.51

  • ubuntulinux-lts-xenial

    < 4.4.0-168.197~14.04.1

  • ubuntulinux-nvidia

    all

  • ubuntulinux-oem

    < 4.15.0-1065.75

  • ubuntulinux-oem-osp1

    < 5.0.0-1030.34

  • ubuntulinux-oracle

    < 4.15.0-1030.33~16.04.1 | < 4.15.0-1030.33

  • ubuntulinux-oracle-5.0

    < 5.0.0-1008.13~18.04.1

  • ubuntulinux-raspi-realtime

    all

  • ubuntulinux-raspi2

    < 4.4.0-1125.134 | < 4.15.0-1052.56 | all

  • ubuntulinux-realtime

    all

  • ubuntulinux-riscv

    all | all

  • ubuntulinux-snapdragon

    < 4.4.0-1129.137 | < 4.15.0-1069.76

References (7)