PublicDateAtUSN: 2019-06-13 Candidate: CVE-2019-0136 PublicDate: 2019-06-13 16:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0136 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00232.html https://ubuntu.com/security/notices/USN-4115-1 https://ubuntu.com/security/notices/USN-4118-1 https://ubuntu.com/security/notices/USN-4145-1 https://ubuntu.com/security/notices/USN-4147-1 Description: Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Ubuntu-Description: It was discovered that the Intel Wi-Fi device driver in the Linux kernel did not properly validate certain Tunneled Direct Link Setup (TDLS). A physically proximate attacker could use this to cause a denial of service (Wi-Fi disconnect). Notes: tyhicks> Ubuntu was told by an OEM that upstream commits 588f7d39b3592a36fb7702ae3b8bdd9be4621e2f and 79c92ca42b5a3e0ea172ea2ce8df8e125af237da address this CVE. We've reached out to Intel, on 2019-08-08, to confirm the commits and are waiting to hear back. Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H [7.4 HIGH] Patches_linux: break-fix: - 588f7d39b3592a36fb7702ae3b8bdd9be4621e2f break-fix: - 79c92ca42b5a3e0ea172ea2ce8df8e125af237da upstream_linux: released (5.2~rc6) precise/esm_linux: ignored (was needs-triage ESM criteria) trusty/esm_linux: ignored (was needs-triage ESM criteria) xenial_linux: released (4.4.0-165.193) esm-infra/xenial_linux: released (4.4.0-165.193) bionic_linux: released (4.15.0-60.67) cosmic_linux: ignored (reached end-of-life) disco_linux: released (5.0.0-31.33) eoan_linux: not-affected (5.2.0-8.9) focal_linux: not-affected (5.4.0-9.12) devel_linux: not-affected (5.4.0-9.12) Patches_linux-lts-trusty: upstream_linux-lts-trusty: released (5.2~rc6) precise/esm_linux-lts-trusty: ignored (was needs-triage ESM criteria) trusty/esm_linux-lts-trusty: DNE xenial_linux-lts-trusty: DNE bionic_linux-lts-trusty: DNE cosmic_linux-lts-trusty: DNE disco_linux-lts-trusty: DNE eoan_linux-lts-trusty: DNE focal_linux-lts-trusty: DNE devel_linux-lts-trusty: DNE Patches_linux-goldfish: upstream_linux-goldfish: released (5.2~rc6) precise/esm_linux-goldfish: DNE trusty/esm_linux-goldfish: DNE xenial_linux-goldfish: ignored (end-of-life) bionic_linux-goldfish: DNE cosmic_linux-goldfish: DNE disco_linux-goldfish: DNE eoan_linux-goldfish: DNE focal_linux-goldfish: DNE devel_linux-goldfish: DNE Patches_linux-grouper: upstream_linux-grouper: released (5.2~rc6) precise/esm_linux-grouper: DNE trusty/esm_linux-grouper: DNE xenial_linux-grouper: DNE bionic_linux-grouper: DNE cosmic_linux-grouper: DNE disco_linux-grouper: DNE eoan_linux-grouper: DNE focal_linux-grouper: DNE devel_linux-grouper: DNE Patches_linux-maguro: upstream_linux-maguro: released (5.2~rc6) precise/esm_linux-maguro: DNE trusty/esm_linux-maguro: DNE xenial_linux-maguro: DNE bionic_linux-maguro: DNE cosmic_linux-maguro: DNE disco_linux-maguro: DNE eoan_linux-maguro: DNE focal_linux-maguro: DNE devel_linux-maguro: DNE Patches_linux-mako: upstream_linux-mako: released (5.2~rc6) precise/esm_linux-mako: DNE trusty/esm_linux-mako: DNE xenial_linux-mako: ignored (abandoned) bionic_linux-mako: DNE cosmic_linux-mako: DNE disco_linux-mako: DNE eoan_linux-mako: DNE focal_linux-mako: DNE devel_linux-mako: DNE Patches_linux-manta: upstream_linux-manta: released (5.2~rc6) precise/esm_linux-manta: DNE trusty/esm_linux-manta: DNE xenial_linux-manta: DNE bionic_linux-manta: DNE cosmic_linux-manta: DNE disco_linux-manta: DNE eoan_linux-manta: DNE focal_linux-manta: DNE devel_linux-manta: DNE Patches_linux-flo: upstream_linux-flo: released (5.2~rc6) precise/esm_linux-flo: DNE trusty/esm_linux-flo: DNE xenial_linux-flo: ignored (abandoned) bionic_linux-flo: DNE cosmic_linux-flo: DNE disco_linux-flo: DNE eoan_linux-flo: DNE focal_linux-flo: DNE devel_linux-flo: DNE Patches_linux-raspi2: upstream_linux-raspi2: released (5.2~rc6) precise/esm_linux-raspi2: DNE trusty/esm_linux-raspi2: DNE xenial_linux-raspi2: released (4.4.0-1123.132) bionic_linux-raspi2: released (4.15.0-1044.47) cosmic_linux-raspi2: ignored (reached end-of-life) disco_linux-raspi2: released (5.0.0-1019.19) eoan_linux-raspi2: not-affected (5.3.0-1005.6) focal_linux-raspi2: not-affected (5.4.0-1004.4) devel_linux-raspi2: not-affected (5.4.0-1004.4) Patches_linux-lts-utopic: upstream_linux-lts-utopic: released (5.2~rc6) precise/esm_linux-lts-utopic: DNE trusty/esm_linux-lts-utopic: DNE xenial_linux-lts-utopic: DNE bionic_linux-lts-utopic: DNE cosmic_linux-lts-utopic: DNE disco_linux-lts-utopic: DNE eoan_linux-lts-utopic: DNE focal_linux-lts-utopic: DNE devel_linux-lts-utopic: DNE Patches_linux-lts-vivid: upstream_linux-lts-vivid: released (5.2~rc6) precise/esm_linux-lts-vivid: DNE trusty/esm_linux-lts-vivid: DNE xenial_linux-lts-vivid: DNE bionic_linux-lts-vivid: DNE cosmic_linux-lts-vivid: DNE disco_linux-lts-vivid: DNE eoan_linux-lts-vivid: DNE focal_linux-lts-vivid: DNE devel_linux-lts-vivid: DNE Patches_linux-lts-wily: upstream_linux-lts-wily: released (5.2~rc6) precise/esm_linux-lts-wily: DNE trusty/esm_linux-lts-wily: DNE xenial_linux-lts-wily: DNE bionic_linux-lts-wily: DNE cosmic_linux-lts-wily: DNE disco_linux-lts-wily: DNE eoan_linux-lts-wily: DNE focal_linux-lts-wily: DNE devel_linux-lts-wily: DNE Patches_linux-lts-xenial: upstream_linux-lts-xenial: released (5.2~rc6) precise/esm_linux-lts-xenial: DNE trusty/esm_linux-lts-xenial: ignored (was needs-triage ESM criteria) xenial_linux-lts-xenial: DNE bionic_linux-lts-xenial: DNE cosmic_linux-lts-xenial: DNE disco_linux-lts-xenial: DNE eoan_linux-lts-xenial: DNE focal_linux-lts-xenial: DNE devel_linux-lts-xenial: DNE Patches_linux-snapdragon: upstream_linux-snapdragon: released (5.2~rc6) precise/esm_linux-snapdragon: DNE trusty/esm_linux-snapdragon: DNE xenial_linux-snapdragon: released (4.4.0-1127.135) bionic_linux-snapdragon: released (4.15.0-1062.69) cosmic_linux-snapdragon: DNE disco_linux-snapdragon: released (5.0.0-1023.24) eoan_linux-snapdragon: DNE focal_linux-snapdragon: DNE devel_linux-snapdragon: DNE Patches_linux-aws: upstream_linux-aws: released (5.2~rc6) precise/esm_linux-aws: DNE trusty/esm_linux-aws: ignored (was needs-triage ESM criteria) xenial_linux-aws: released (4.4.0-1095.106) esm-infra/xenial_linux-aws: released (4.4.0-1095.106) bionic_linux-aws: released (4.15.0-1047.49) cosmic_linux-aws: ignored (reached end-of-life) disco_linux-aws: released (5.0.0-1018.20) eoan_linux-aws: not-affected (5.3.0-1003.3) focal_linux-aws: not-affected (5.4.0-1005.5) devel_linux-aws: not-affected (5.4.0-1005.5) Patches_linux-hwe: upstream_linux-hwe: released (5.2~rc6) precise/esm_linux-hwe: DNE trusty/esm_linux-hwe: DNE xenial_linux-hwe: released (4.15.0-60.67~16.04.1) esm-infra/xenial_linux-hwe: released (4.15.0-60.67~16.04.1) bionic_linux-hwe: released (5.0.0-31.33~18.04.1) cosmic_linux-hwe: DNE disco_linux-hwe: DNE eoan_linux-hwe: DNE focal_linux-hwe: DNE devel_linux-hwe: DNE Patches_linux-hwe-edge: upstream_linux-hwe-edge: released (5.2~rc6) precise/esm_linux-hwe-edge: DNE trusty/esm_linux-hwe-edge: DNE xenial_linux-hwe-edge: released (4.15.0-60.67~16.04.1) esm-infra/xenial_linux-hwe-edge: released (4.15.0-60.67~16.04.1) bionic_linux-hwe-edge: ignored (was pending \[5.3.0-19.20~18.04.2\] now end-of-life) cosmic_linux-hwe-edge: DNE disco_linux-hwe-edge: DNE eoan_linux-hwe-edge: DNE focal_linux-hwe-edge: DNE devel_linux-hwe-edge: DNE Patches_linux-gke: upstream_linux-gke: released (5.2~rc6) precise/esm_linux-gke: DNE trusty/esm_linux-gke: DNE xenial_linux-gke: ignored (end-of-life) bionic_linux-gke: DNE cosmic_linux-gke: DNE disco_linux-gke: DNE eoan_linux-gke: DNE focal_linux-gke: not-affected devel_linux-gke: DNE Patches_linux-gke-4.15: upstream_linux-gke-4.15: released (5.2~rc6) precise/esm_linux-gke-4.15: DNE trusty/esm_linux-gke-4.15: DNE xenial_linux-gke-4.15: DNE bionic_linux-gke-4.15: released (4.15.0-1041.43) disco_linux-gke-4.15: DNE eoan_linux-gke-4.15: DNE focal_linux-gke-4.15: DNE devel_linux-gke-4.15: DNE Patches_linux-gke-5.0: upstream_linux-gke-5.0: released (5.2~rc6) precise/esm_linux-gke-5.0: DNE trusty/esm_linux-gke-5.0: DNE xenial_linux-gke-5.0: DNE bionic_linux-gke-5.0: released (5.0.0-1020.20~18.04.1) disco_linux-gke-5.0: DNE eoan_linux-gke-5.0: DNE focal_linux-gke-5.0: DNE devel_linux-gke-5.0: DNE Patches_linux-azure: upstream_linux-azure: released (5.2~rc6) precise/esm_linux-azure: DNE trusty/esm_linux-azure: ignored (was needs-triage ESM criteria) xenial_linux-azure: released (4.15.0-1056.61) esm-infra/xenial_linux-azure: released (4.15.0-1056.61) bionic_linux-azure: released (5.0.0-1022.23~18.04.1) cosmic_linux-azure: ignored (reached end-of-life) disco_linux-azure: released (5.0.0-1022.23) eoan_linux-azure: not-affected (5.3.0-1002.2) focal_linux-azure: not-affected (5.4.0-1006.6) devel_linux-azure: not-affected (5.4.0-1006.6) Patches_linux-azure-edge: upstream_linux-azure-edge: released (5.2~rc6) precise/esm_linux-azure-edge: DNE trusty/esm_linux-azure-edge: DNE xenial_linux-azure-edge: released (4.15.0-1056.61) bionic_linux-azure-edge: released (5.0.0-1022.23~18.04.1) cosmic_linux-azure-edge: DNE disco_linux-azure-edge: DNE eoan_linux-azure-edge: DNE focal_linux-azure-edge: DNE devel_linux-azure-edge: DNE Patches_linux-gcp: upstream_linux-gcp: released (5.2~rc6) precise/esm_linux-gcp: DNE trusty/esm_linux-gcp: DNE xenial_linux-gcp: released (4.15.0-1041.43) esm-infra/xenial_linux-gcp: released (4.15.0-1041.43) bionic_linux-gcp: released (4.15.0-1042.45) cosmic_linux-gcp: ignored (reached end-of-life) disco_linux-gcp: released (5.0.0-1020.20) eoan_linux-gcp: not-affected (5.3.0-1003.3) focal_linux-gcp: not-affected (5.4.0-1005.5) devel_linux-gcp: not-affected (5.4.0-1005.5) Patches_linux-kvm: upstream_linux-kvm: released (5.2~rc6) precise/esm_linux-kvm: DNE trusty/esm_linux-kvm: DNE xenial_linux-kvm: released (4.4.0-1059.66) esm-infra/xenial_linux-kvm: released (4.4.0-1059.66) bionic_linux-kvm: released (4.15.0-1043.43) cosmic_linux-kvm: ignored (reached end-of-life) disco_linux-kvm: released (5.0.0-1019.20) eoan_linux-kvm: not-affected (5.3.0-1003.3) focal_linux-kvm: not-affected (5.4.0-1004.4) devel_linux-kvm: not-affected (5.4.0-1004.4) Patches_linux-euclid: upstream_linux-euclid: released (5.2~rc6) precise/esm_linux-euclid: DNE trusty/esm_linux-euclid: DNE xenial_linux-euclid: ignored (was needs-triage now end-of-life) bionic_linux-euclid: DNE cosmic_linux-euclid: DNE disco_linux-euclid: DNE eoan_linux-euclid: DNE focal_linux-euclid: DNE devel_linux-euclid: DNE Patches_linux-oem: upstream_linux-oem: released (5.2~rc6) precise/esm_linux-oem: DNE trusty/esm_linux-oem: DNE xenial_linux-oem: ignored (was needs-triage now end-of-life) bionic_linux-oem: released (4.15.0-1056.65) cosmic_linux-oem: ignored (reached end-of-life) disco_linux-oem: ignored (was pending \[4.15.0-1056.65\] now end-of-life) eoan_linux-oem: released (4.15.0-1059.68) focal_linux-oem: DNE devel_linux-oem: DNE Patches_linux-gcp-edge: upstream_linux-gcp-edge: released (5.2~rc6) precise/esm_linux-gcp-edge: DNE trusty/esm_linux-gcp-edge: DNE xenial_linux-gcp-edge: DNE bionic_linux-gcp-edge: released (4.15.0-1042.45) cosmic_linux-gcp-edge: DNE disco_linux-gcp-edge: DNE eoan_linux-gcp-edge: DNE focal_linux-gcp-edge: DNE devel_linux-gcp-edge: DNE Patches_linux-aws-hwe: upstream_linux-aws-hwe: released (5.2~rc6) precise/esm_linux-aws-hwe: DNE trusty/esm_linux-aws-hwe: DNE xenial_linux-aws-hwe: released (4.15.0-1047.49~16.04.1) esm-infra/xenial_linux-aws-hwe: released (4.15.0-1047.49~16.04.1) bionic_linux-aws-hwe: DNE cosmic_linux-aws-hwe: DNE disco_linux-aws-hwe: DNE eoan_linux-aws-hwe: DNE focal_linux-aws-hwe: DNE devel_linux-aws-hwe: DNE Patches_linux-oracle: upstream_linux-oracle: released (5.2~rc6) precise/esm_linux-oracle: DNE trusty/esm_linux-oracle: DNE xenial_linux-oracle: released (4.15.0-1022.25~16.04.1) esm-infra/xenial_linux-oracle: released (4.15.0-1022.25~16.04.1) bionic_linux-oracle: released (4.15.0-1022.25) cosmic_linux-oracle: ignored (reached end-of-life) disco_linux-oracle: released (5.0.0-1004.8) eoan_linux-oracle: not-affected (5.3.0-1002.2) focal_linux-oracle: not-affected (5.4.0-1005.5) devel_linux-oracle: not-affected (5.4.0-1005.5) Patches_linux-oem-osp1: upstream_linux-oem-osp1: released (5.2~rc6) precise/esm_linux-oem-osp1: DNE trusty_linux-oem-osp1: DNE trusty/esm_linux-oem-osp1: DNE xenial_linux-oem-osp1: DNE bionic_linux-oem-osp1: released (5.0.0-1024.27) disco_linux-oem-osp1: ignored (reached end-of-life) eoan_linux-oem-osp1: released (5.0.0-1024.27) focal_linux-oem-osp1: DNE devel_linux-oem-osp1: DNE Patches_linux-aws-5.0: upstream_linux-aws-5.0: released (5.2~rc6) precise/esm_linux-aws-5.0: DNE trusty_linux-aws-5.0: DNE trusty/esm_linux-aws-5.0: DNE xenial_linux-aws-5.0: DNE bionic_linux-aws-5.0: not-affected (5.0.0-1021.24~18.04.1) disco_linux-aws-5.0: DNE eoan_linux-aws-5.0: DNE focal_linux-aws-5.0: DNE devel_linux-aws-5.0: DNE Patches_linux-azure-5.3: upstream_linux-azure-5.3: released (5.2~rc6) precise/esm_linux-azure-5.3: DNE trusty_linux-azure-5.3: DNE trusty/esm_linux-azure-5.3: DNE xenial_linux-azure-5.3: DNE bionic_linux-azure-5.3: not-affected (5.3.0-1007.8~18.04.1) disco_linux-azure-5.3: DNE eoan_linux-azure-5.3: DNE focal_linux-azure-5.3: DNE devel_linux-azure-5.3: DNE Patches_linux-gcp-5.3: upstream_linux-gcp-5.3: released (5.2~rc6) precise/esm_linux-gcp-5.3: DNE trusty_linux-gcp-5.3: DNE trusty/esm_linux-gcp-5.3: DNE xenial_linux-gcp-5.3: DNE bionic_linux-gcp-5.3: not-affected (5.3.0-1008.9~18.04.1) disco_linux-gcp-5.3: DNE eoan_linux-gcp-5.3: DNE focal_linux-gcp-5.3: DNE devel_linux-gcp-5.3: DNE Patches_linux-oracle-5.0: upstream_linux-oracle-5.0: released (5.2~rc6) precise/esm_linux-oracle-5.0: DNE trusty_linux-oracle-5.0: DNE trusty/esm_linux-oracle-5.0: DNE xenial_linux-oracle-5.0: DNE bionic_linux-oracle-5.0: not-affected (5.0.0-1007.12~18.04.1) disco_linux-oracle-5.0: DNE eoan_linux-oracle-5.0: DNE focal_linux-oracle-5.0: DNE devel_linux-oracle-5.0: DNE Patches_linux-raspi2-5.3: upstream_linux-raspi2-5.3: released (5.2~rc6) precise/esm_linux-raspi2-5.3: DNE trusty_linux-raspi2-5.3: DNE trusty/esm_linux-raspi2-5.3: DNE xenial_linux-raspi2-5.3: DNE bionic_linux-raspi2-5.3: not-affected (5.3.0-1017.19~18.04.1) eoan_linux-raspi2-5.3: DNE focal_linux-raspi2-5.3: DNE devel_linux-raspi2-5.3: DNE Patches_linux-oem-5.6: upstream_linux-oem-5.6: released (5.2~rc6) precise/esm_linux-oem-5.6: DNE trusty_linux-oem-5.6: DNE trusty/esm_linux-oem-5.6: DNE xenial_linux-oem-5.6: DNE bionic_linux-oem-5.6: DNE eoan_linux-oem-5.6: DNE focal_linux-oem-5.6: not-affected (5.4.0-1002.4) devel_linux-oem-5.6: not-affected (5.4.0-1002.4) Patches_linux-gke-5.3: upstream_linux-gke-5.3: released (5.2~rc6) precise/esm_linux-gke-5.3: DNE trusty_linux-gke-5.3: DNE trusty/esm_linux-gke-5.3: DNE xenial_linux-gke-5.3: DNE bionic_linux-gke-5.3: not-affected (5.3.0-1011.12~18.04.1) eoan_linux-gke-5.3: DNE focal_linux-gke-5.3: DNE devel_linux-gke-5.3: DNE Patches_linux-oracle-5.3: upstream_linux-oracle-5.3: released (5.2~rc6) precise/esm_linux-oracle-5.3: DNE trusty_linux-oracle-5.3: DNE trusty/esm_linux-oracle-5.3: DNE xenial_linux-oracle-5.3: DNE bionic_linux-oracle-5.3: not-affected (5.3.0-1011.12~18.04.1) eoan_linux-oracle-5.3: DNE focal_linux-oracle-5.3: DNE devel_linux-oracle-5.3: DNE