A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.181-142.260-debuginfoUpgrade kernel-livepatch-4.14.181-142.260Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.186-146.268Upgrade kernelUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfo | Jul 23, 2020 | Jul 23, 2020 |
| Amazon_linux | — | Upgrade kernel | Jul 18, 2020 | Jun 19, 2020 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-193_1_2Upgrade kpatch-patch-4_18_0-193Upgrade kpatch-patch-4_18_0-193-debugsourceUpgrade kpatch-patch-4_18_0-193_1_2-debuginfoUpgrade kpatch-patch-4_18_0-193-debuginfoUpgrade kernelUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-193_6_3Upgrade kpatch-patch-4_18_0-193_1_2-debugsourceUpgrade kpatch-patch-4_18_0-193_6_3-debugsourceUpgrade kpatch-patch-4_18_0-193_6_3-debuginfo | Jul 23, 2020 | Jul 21, 2020 |
| Debian | — | Upgrade linux | Aug 17, 2020 | Aug 17, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade python3-perfUpgrade kernel | Jul 31, 2020 | Jul 30, 2020 |
| Oracle_linux | — | Upgrade kernel | Jul 25, 2020 | Jun 9, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 15, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 23, 2020 | Jul 21, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Jun 20, 2020 | Jun 19, 2020 |
| Ubuntu | — | Upgrade linux-image-5.0.0-1045-gkeUpgrade linux-image-5.3.0-64-lowlatencyUpgrade linux-image-4.15.0-1080-awsUpgrade linux-image-5.3.0-1030-raspi2Upgrade linux-image-genericUpgrade linux-image-4.4.0-186-powerpc-e500mcUpgrade linux-image-5.3.0-1032-awsUpgrade linux-image-4.4.0-1111-awsUpgrade linux-image-azure-edgeUpgrade linux-image-4.4.0-186-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1065-oem-osp1Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-45-generic-lpaeUpgrade linux-image-5.4.0-1023-azureUpgrade linux-image-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.15.0-1094-oemUpgrade linux-image-4.15.0-1067-gkeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-gke-5.0Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1081-gcpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.4.0-1022-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-64-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-186-powerpc-smpUpgrade linux-image-4.15.0-115-genericUpgrade linux-image-gkeop-5.3Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1140-snapdragonUpgrade linux-image-raspiUpgrade linux-image-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-4.4.0-186-generic-lpaeUpgrade linux-image-4.15.0-1068-raspi2Upgrade linux-image-5.4.0-45-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.3.0-1032-gkeUpgrade linux-image-5.3.0-1032-gcpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1136-raspi2Upgrade linux-image-oemUpgrade linux-image-4.4.0-1077-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-5.4.0-1016-raspiUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-186-lowlatencyUpgrade linux-image-5.4.0-1022-oracleUpgrade linux-image-4.15.0-1051-oracleUpgrade linux-image-4.15.0-115-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1022-awsUpgrade linux-image-gke-5.4Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1084-snapdragonUpgrade linux-image-4.15.0-1072-kvmUpgrade linux-image-aws-edgeUpgrade linux-image-4.15.0-1093-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-gke-5.3Upgrade linux-image-4.4.0-1075-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-45-lowlatencyUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-gke-4.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-115-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-186-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-5.3.0-1034-azureUpgrade linux-image-5.3.0-64-genericUpgrade linux-image-4.4.0-186-powerpc64-smpUpgrade linux-image-5.3.0-1030-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-kvm | Aug 5, 2020 | Jun 19, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub