The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Jan 22, 2020 | Nov 27, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade perf | Feb 24, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-sourceUpgrade python3-perfUpgrade kernel-develUpgrade bpftool | Jan 3, 2020 | Nov 27, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Nov 28, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 27, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Jan 22, 2020 | Nov 27, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default | Dec 7, 2019 | Nov 27, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-171-powerpc64-embUpgrade linux-image-4.4.0-171-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.0.0-38-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oracle-edgeUpgrade linux-image-genericUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-4.4.0-1131-snapdragonUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-4.4.0-171-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-4.4.0-171-genericUpgrade linux-image-4.4.0-171-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-powerpc-e500mcUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1127-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1064-kvmUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-aws-hweUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1066-azureUpgrade linux-image-awsUpgrade linux-image-4.4.0-171-powerpc-e500mcUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-1100-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-5.3.0-1009-azureUpgrade linux-image-4.4.0-1060-awsUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-171-lowlatencyUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-raspi2Upgrade linux-image-gke-5.0Upgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-edgeUpgrade linux-image-azure-edgeUpgrade linux-image-gke-4.15 | Jan 8, 2020 | Nov 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub