Bug 1749973 (CVE-2019-15220)
Summary: | CVE-2019-15220 kernel: Use-after-free in drivers/net/wireless/intersil/p54/p54usb.c | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Pedro Sampaio <psampaio> |
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
Status: | CLOSED WONTFIX | QA Contact: | |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | unspecified | CC: | acaringi, airlied, allarkin, bdettelb, bhu, blc, brdeoliv, bskeggs, dhoward, dvlasenk, fhrbata, hdegoede, hkrzesin, ichavero, itamar, jarodwilson, jeremy, jforbes, jglisse, jlelli, john.j5live, jonathan, josef, jschorr, jshortt, jstancek, jwboyer, kernel-maint, kernel-mgr, labbott, lgoncalv, linville, masami256, mchehab, mjg59, mlangsdo, nmurray, plougher, pmatouse, rvrbovsk, steved, williams |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: |
A vulnerability was found in the Linux kernel in versions prior to 5.2.1. The Prism54 USB device driver is susceptible to malicious USB devices. An attacker able to add or remove USB devices could cause a memory corruption or crash leading to a denial of service. Availability is the highest threat to the system.
|
Story Points: | --- |
Clone Of: | Environment: | ||
Last Closed: | 2020-01-21 14:09:36 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 1749981 | ||
Bug Blocks: | 1749979 |
Description
Pedro Sampaio
2019-09-07 01:08:59 UTC
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 1749981] This was fixed for Fedora with the 5.1.18 stable kernel update Thinking of workaround and if actual for RHEL-8. For RHEL-8 kernel (if reading .config file), related params disabled by default: # CONFIG_P54_COMMON is not set # CONFIG_PRISM54 is not set - so the issue not actual for RHEL-8 default kernels. When building kernel and with "make menuconfig" (for being sure that these two params disabled), disable checkbox "Softmac Prism54 support": Device Drivers ---> [*] Network device support ---> Wireless LAN ---> [*] Wireless LAN (IEEE 802.11) < > Softmac Prism54 support This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2019-15220 On 20 Jan 2020, previously written: "For RHEL-8 kernel (if reading .config file), related params disabled by default: # CONFIG_P54_COMMON is not set # CONFIG_PRISM54 is not set ". Checked different .configs for "rhel* < 8" also. Conclusion: it is disabled by default for all default kernels (versions of rhel) apart from old (was enabled for 2.6.18 that is rhel5). For rhel5 (and before rhel5) use mitigation that is blacklist corresponding modules: vi /etc/modprobe.d/blacklist.conf blacklist p54pci blacklist prism54 Mitigation: To mitigate this issue (for rhel5), prevent modules p54pci, prism54 from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. |