A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-livepatch-4.14.181-142.260-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.186-146.268Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.181-142.260 | Jul 23, 2020 | Jul 23, 2020 |
| Amazon_linux | — | Upgrade kernel | Jul 18, 2020 | Jun 19, 2020 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-193_1_2Upgrade kpatch-patch-4_18_0-193-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-193_6_3Upgrade kpatch-patch-4_18_0-193Upgrade kpatch-patch-4_18_0-193_6_3-debugsourceUpgrade kpatch-patch-4_18_0-193_6_3-debuginfoUpgrade kpatch-patch-4_18_0-193-debugsourceUpgrade kpatch-patch-4_18_0-193_1_2-debugsourceUpgrade kpatch-patch-4_18_0-193_1_2-debuginfoUpgrade kernel-rt | Jul 23, 2020 | Jul 21, 2020 |
| Debian | — | Upgrade linux | Aug 17, 2020 | Aug 17, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-sourceUpgrade perfUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade bpftool | Jul 31, 2020 | Jul 30, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 25, 2020 | Jun 9, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 16, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 23, 2020 | Jul 21, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-obs-build | Jun 20, 2020 | Jun 19, 2020 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-115-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.4.0-186-powerpc-smpUpgrade linux-image-5.4.0-1022-oracleUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-115-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1140-snapdragonUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-gke-5.3Upgrade linux-image-4.4.0-186-powerpc-e500mcUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-4.15.0-1084-snapdragonUpgrade linux-image-5.0.0-1045-gkeUpgrade linux-image-5.3.0-64-genericUpgrade linux-image-azureUpgrade linux-image-5.3.0-1030-raspi2Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-45-genericUpgrade linux-image-4.15.0-1067-gkeUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.4.0-45-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-4.4.0-186-powerpc64-embUpgrade linux-image-4.4.0-1136-raspi2Upgrade linux-image-5.3.0-1032-gcpUpgrade linux-image-awsUpgrade linux-image-5.4.0-45-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-1111-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1023-azureUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-1016-raspiUpgrade linux-image-4.15.0-1093-azureUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.3.0-1030-oracleUpgrade linux-image-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1051-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-186-genericUpgrade linux-image-4.15.0-115-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.3.0-1034-azureUpgrade linux-image-gke-5.4Upgrade linux-image-raspiUpgrade linux-image-4.15.0-1068-raspi2Upgrade linux-image-5.3.0-1032-awsUpgrade linux-image-gkeop-5.3Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1081-gcpUpgrade linux-image-4.15.0-1094-oemUpgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-186-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.3.0-1032-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-186-powerpc64-smpUpgrade linux-image-4.15.0-1072-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-186-lowlatencyUpgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-5.3.0-64-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1065-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-5.4.0-1022-gcpUpgrade linux-image-aws-edgeUpgrade linux-image-5.4.0-1022-awsUpgrade linux-image-5.3.0-64-lowlatencyUpgrade linux-image-4.15.0-1080-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1077-kvm | Aug 5, 2020 | Jun 19, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub