CVE-2019-16746

An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow.

Published: Sep 24, 2019
Updated: Nov 9, 2025
CVE: CVE-2019-16746
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-120

Affected Software
References

Software	From	Fixed in
linux / linux_kernel	2.6.25	3.16.79
linux / linux_kernel	3.17	4.4.197
linux / linux_kernel	4.5	4.9.197
linux / linux_kernel	4.10	4.14.149
linux / linux_kernel	4.15	4.19.79
linux / linux_kernel	4.20	5.3.6
debian / debian_linux	8.0	8.0.x
canonical / ubuntu_linux	18.04	18.04.x
canonical / ubuntu_linux	19.04	19.04.x
canonical / ubuntu_linux	19.10	19.10.x
canonical / ubuntu_linux	16.04	16.04.x
fedoraproject / fedora	30	30.x
opensuse / leap	15.1	15.1.x

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html
http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TASE2ESEZAER6DTZH3DJ4K2JNO46TVL7/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TASE2ESEZAER6DTZH3DJ4K2JNO46TVL7/
https://marc.info/?l=linux-wireless&m=156901391225058&w=2
https://seclists.org/bugtraq/2019/Nov/11
https://security.netapp.com/advisory/ntap-20191031-0005/
https://usn.ubuntu.com/4183-1/
https://usn.ubuntu.com/4186-1/
https://usn.ubuntu.com/4209-1/
https://usn.ubuntu.com/4210-1/
https://www.oracle.com/security-alerts/cpuApr2021.html

Vulnerability Database

308,681

CVE-2019-16746

Deep Security Visibility Without the Complexity