CVE-2019-14815

Key facts

CVSS score

7.8 (v3.1)

Severity

HIGH

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness (CWE)

CWE-122

EPSS score

0.5% (41th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2019-5944)

Published

November 25, 2019

NVD last modified

June 17, 2026

Status

Modified

Affected products

• linux / linux kernel
• netapp / altavault
• netapp / baseboard management controller
• netapp / hci
• netapp / solidfire
• netapp / solidfire baseboard management controller firmware
• netapp / steelstore
• redhat / codeready linux builder eus
• redhat / codeready linux builder eus
• redhat / codeready linux builder eus
• redhat / codeready linux builder eus
• redhat / codeready linux builder for power little endian eus
• redhat / codeready linux builder for power little endian eus
• redhat / codeready linux builder for power little endian eus
• redhat / codeready linux builder for power little endian eus
• redhat / enterprise linux
• redhat / enterprise linux
• redhat / enterprise linux
• redhat / enterprise linux
• redhat / enterprise linux for ibm z systems (structure a)
• redhat / enterprise linux for ibm z systems eus
• redhat / enterprise linux for ibm z systems eus
• redhat / enterprise linux for ibm z systems eus
• redhat / enterprise linux for ibm z systems eus
• redhat / enterprise linux for real time
• redhat / enterprise linux for real time for nfv
• redhat / enterprise linux for real time for nfv tus
• redhat / enterprise linux for real time for nfv tus
• redhat / enterprise linux for real time for nfv tus
• redhat / enterprise linux for real time tus
• redhat / enterprise linux for real time tus
• redhat / enterprise linux for real time tus
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server tus
• redhat / enterprise linux server tus
• redhat / enterprise linux server tus

Certified products that may be affected

32 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 8 NSS Cryptographic Module - Red Hat, Inc. - FIPS 140 5513 - active
• Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, LLC - FIPS 140 5461 - active
• Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, Inc. - FIPS 140 5089 - active
• Red Hat Enterprise Linux 8.6 - Red Hat, Inc. - Common Criteria CCEVS-VR-VID-11309-2024 - archived
• Red Hat Enterprise Linux 8 OpenSSL Cryptographic Module - Red Hat®, Inc. - FIPS 140 4642 - historical

See all 32 in the Security Certifications Explorer.

References

• https://access.redhat.com/errata/RHSA-2020:0174(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2020:0328(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2020:0339(Third Party Advisory)
• https://access.redhat.com/security/cve/cve-2019-14815(Third Party Advisory)
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14815(Issue Tracking, Third Party Advisory)
• https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3a(Issue Tracking, Third Party Advisory)
• https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html(Mailing List, Third Party Advisory)
• https://lore.kernel.org/linux-wireless/20190828020751.13625-1-huangwenabc%40gmail.com(Issue Tracking, Mailing List, Patch, Vendor Advisory)
• https://security.netapp.com/advisory/ntap-20200103-0001/(Mailing List, Patch, Third Party Advisory)
• https://www.openwall.com/lists/oss-security/2019/08/28/1(Mailing List, Patch, Third Party Advisory)