CVE-2019-14814: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.

Affected products

  • Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 19.04 only
  • Debian Debian Linux: version 8.0 only
  • Linux Linux Kernel: from 3.7, before 3.16.74 (fixed in 3.16.74); from 3.17, before 4.4.194 (fixed in 4.4.194); from 4.5, before 4.9.194 (fixed in 4.9.194); from 4.10, before 4.14.146 (fixed in 4.14.146); from 4.15, before 4.19.75 (fixed in 4.19.75); from 4.20, before 5.2.17 (fixed in 5.2.17)
  • Netapp a220 Firmware: affected versions not specified
  • Netapp a320 Firmware: affected versions not specified
  • Netapp a700s Firmware: affected versions not specified
  • Netapp a800 Firmware: affected versions not specified
  • Netapp c190 Firmware: affected versions not specified
  • Netapp Data Availability Services: affected versions not specified
  • Netapp FAS2720 Firmware: affected versions not specified
  • Netapp FAS2750 Firmware: affected versions not specified
  • Netapp h300e Firmware: affected versions not specified
  • Netapp h300s Firmware: affected versions not specified
  • Netapp h410c Firmware: affected versions not specified
  • Netapp h410s Firmware: affected versions not specified
  • Netapp h500e Firmware: affected versions not specified
  • Netapp h500s Firmware: affected versions not specified
  • Netapp h610s Firmware: affected versions not specified
  • Netapp h700e Firmware: affected versions not specified
  • Netapp h700s Firmware: affected versions not specified
  • Netapp Hci Management Node: affected versions not specified
  • Netapp Service Processor: affected versions not specified
  • Netapp Solidfire: affected versions not specified
  • Netapp Steelstore Cloud Integrated Storage: affected versions not specified
  • Opensuse Leap: version 15.0 only; version 15.1 only
  • and 9 more

Published 2019-09-20. Last modified 2026-06-17.