The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error occurs. When a guest is running on a host CPU affected by the TAA flaw (TAA_NO=0), but is not affected by the MDS issue (MDS_NO=1), the guest was to clear the affected buffers by using a VERW instruction mechanism. But when the MDS_NO=1 bit was exported to the guests, the guests did not use the VERW mechanism to clear the affected buffers. This issue affects guests running on Cascade Lake CPUs and requires that host has 'TSX' enabled. Confidentiality of data is the highest threat associated with this vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 5, 2020 | Feb 4, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade python-perf | Mar 24, 2021 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python-perfUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Feb 26, 2020 | Feb 25, 2020 |
| Oracle_linux | — | Upgrade kernel | Mar 19, 2020 | Nov 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 13, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Feb 5, 2020 | Feb 4, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-build | Dec 18, 2019 | Dec 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 13, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub