In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Mar 12, 2020 | Sep 13, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-sourceUpgrade python3-perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel | Sep 30, 2019 | Sep 13, 2019 |
| Oracle_linux | — | Upgrade kernel | Oct 5, 2022 | Sep 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 13, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Mar 12, 2020 | Sep 13, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-build | Sep 21, 2019 | Sep 13, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-1017-gcpUpgrade linux-image-3.2.0-143-powerpc-smpUpgrade linux-image-serverUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.15.0-64-genericUpgrade linux-image-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-3.13.0-173-powerpc-smpUpgrade linux-image-5.0.0-29-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1021-snapdragonUpgrade linux-image-3.2.0-143-omapUpgrade linux-image-3.13.0-173-lowlatencyUpgrade linux-image-5.0.0-29-lowlatencyUpgrade linux-image-4.4.0-164-powerpc64-embUpgrade linux-image-5.0.0-1017-kvmUpgrade linux-image-gke-5.0Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-164-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-3.13.0-173-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.2.0-143-powerpc64-smpUpgrade linux-image-5.0.0-29-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-164-genericUpgrade linux-image-5.0.0-1017-gkeUpgrade linux-image-3.13.0-173-powerpc-e500Upgrade linux-image-4.15.0-1044-gcpUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1064-snapdragonUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1126-snapdragonUpgrade linux-image-4.15.0-1056-oemUpgrade linux-image-4.15.0-64-lowlatencyUpgrade linux-image-4.15.0-1025-oracleUpgrade linux-image-generic-paeUpgrade linux-image-3.2.0-143-virtualUpgrade linux-image-3.2.0-143-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-highbankUpgrade linux-image-oemUpgrade linux-image-omapUpgrade linux-image-3.13.0-173-genericUpgrade linux-image-4.4.0-164-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1047-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1020-azureUpgrade linux-image-4.4.0-1058-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpcUpgrade linux-image-powerpc-e500Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1046-kvmUpgrade linux-image-4.15.0-1059-azureUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1122-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.0.0-1016-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1044-gkeUpgrade linux-image-3.13.0-173-powerpc64-embUpgrade linux-image-4.4.0-164-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-173-powerpc-e500mcUpgrade linux-image-4.15.0-64-generic-lpaeUpgrade linux-image-4.15.0-1050-awsUpgrade linux-image-3.2.0-143-generic-paeUpgrade linux-image-genericUpgrade linux-image-4.4.0-164-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-3.2.0-143-highbankUpgrade linux-image-3.13.0-173-powerpc64-smpUpgrade linux-image-5.0.0-1017-raspi2Upgrade linux-image-4.4.0-164-powerpc64-smpUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1094-awsUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-16.04 | Sep 19, 2019 | Sep 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub