{"schemaVersion":3,"id":"USN-4228-2","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"linux-lts-xenial, linux-aws vulnerabilities\n\nUSN-4228-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04\nLTS. This update provides the corresponding updates for the Linux\nHardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu\n14.04 ESM.\n\nIt was discovered that a heap-based buffer overflow existed in the Marvell\nWiFi-Ex Driver for the Linux kernel. A physically proximate attacker could\nuse this to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2019-14895, CVE-2019-14901)\n\nIt was discovered that a heap-based buffer overflow existed in the Marvell\nLibertas WLAN Driver for the Linux kernel. A physically proximate attacker\ncould use this to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2019-14896, CVE-2019-14897)\n\nAnthony Steinhauser discovered that the Linux kernel did not properly\nperform Spectre_RSB mitigations to all processors for PowerPC architecture\nsystems in some situations. A local attacker could use this to expose\nsensitive information. (CVE-2019-18660)\n\nIt was discovered that Geschwister Schneider USB CAN interface driver in\nthe Linux kernel did not properly deallocate memory in certain failure\nconditions. A physically proximate attacker could use this to cause a\ndenial of service (kernel memory exhaustion). (CVE-2019-19052)\n\nIt was discovered that the driver for memoryless force-feedback input\ndevices in the Linux kernel contained a use-after-free vulnerability. A\nphysically proximate attacker could possibly use this to cause a denial of\nservice (system crash) or execute arbitrary code. (CVE-2019-19524)\n\nIt was discovered that the PEAK-System Technik USB driver in the Linux\nkernel did not properly sanitize memory before sending it to the device. A\nphysically proximate attacker could use this to expose sensitive\ninformation (kernel memory). (CVE-2019-19534)","dates":{"published":"2020-01-07T20:10:37.000Z","modified":"2026-06-03T13:33:26.332Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"linux-aws","name":"linux-aws","label":"linux-aws","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws","purlType":"deb","versions":[{"text":"< 4.4.0-1060.64","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-1060.64","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-lts-xenial","name":"linux-lts-xenial","label":"linux-lts-xenial","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-lts-xenial","purlType":"deb","versions":[{"text":"< 4.4.0-171.200~14.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-171.200~14.04.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-4228-2","label":"ubuntu.com/security/notices/USN-4228-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-14895","label":"ubuntu.com/security/CVE-2019-14895","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-14896","label":"ubuntu.com/security/CVE-2019-14896","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-14897","label":"ubuntu.com/security/CVE-2019-14897","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-14901","label":"ubuntu.com/security/CVE-2019-14901","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-18660","label":"ubuntu.com/security/CVE-2019-18660","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-19052","label":"ubuntu.com/security/CVE-2019-19052","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-19524","label":"ubuntu.com/security/CVE-2019-19524","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-19534","label":"ubuntu.com/security/CVE-2019-19534","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2019-14895","CVE-2019-14896","CVE-2019-14897","CVE-2019-14901","CVE-2019-18660","CVE-2019-19052","CVE-2019-19524","CVE-2019-19534"],"downstream":[],"duplicates":[],"related":["CVE-2019-14895","CVE-2019-14896","CVE-2019-14897","CVE-2019-14901","CVE-2019-18660","CVE-2019-19052","CVE-2019-19524","CVE-2019-19534"]},"timeline":[{"kind":"published","date":"2020-01-07T20:10:37.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-03T13:33:26.332Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T17:17:20.976Z","stale":false,"partial":false}}