A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Sep 4, 2019 |
| Debian | — | Upgrade linux | Sep 26, 2019 | Sep 4, 2019 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-ec2Upgrade kernel-default-extraUpgrade kernel-ec2-develUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-default | Sep 21, 2019 | Sep 4, 2019 |
| Ubuntu | — | Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-5.0.0-1021-gcpUpgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-5.0.0-1024-snapdragonUpgrade linux-image-5.0.0-32-genericUpgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-32-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.0.0-32-lowlatencyUpgrade linux-image-5.0.0-1019-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1059-oemUpgrade linux-image-4.15.0-1061-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-166-genericUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-4.15.0-1052-awsUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-5.0.0-1020-raspi2Upgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-66-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-166-generic-lpaeUpgrade linux-image-4.4.0-1056-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.0.0-1023-gkeUpgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-5.0.0-1020-kvmUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-gke-5.0Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1023-azureUpgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1128-snapdragonUpgrade linux-image-gke-4.15Upgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual | Oct 18, 2019 | Sep 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 4, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub