In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Mar 12, 2020 | Sep 13, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernel | Sep 30, 2019 | Sep 13, 2019 |
| Oracle_linux | — | Upgrade kernel | Oct 5, 2022 | Sep 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 13, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel | Mar 12, 2020 | Sep 13, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-default | Sep 21, 2019 | Sep 13, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-164-powerpc64-smpUpgrade linux-image-3.2.0-143-genericUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-3.13.0-173-powerpc64-smpUpgrade linux-image-gke-4.15Upgrade linux-image-highbankUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-64-generic-lpaeUpgrade linux-image-4.15.0-1044-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-3.13.0-173-powerpc64-embUpgrade linux-image-4.4.0-164-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1094-awsUpgrade linux-image-5.0.0-1017-raspi2Upgrade linux-image-4.15.0-1047-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-164-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-173-genericUpgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1122-raspi2Upgrade linux-image-4.15.0-1050-awsUpgrade linux-image-4.4.0-164-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-omapUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-173-powerpc-e500mcUpgrade linux-image-3.2.0-143-highbankUpgrade linux-image-5.0.0-1020-azureUpgrade linux-image-powerpcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1058-kvmUpgrade linux-image-4.15.0-1059-azureUpgrade linux-image-3.2.0-143-generic-paeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc-e500Upgrade linux-image-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1016-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1046-kvmUpgrade linux-image-5.0.0-1021-snapdragonUpgrade linux-image-4.4.0-164-powerpc-smpUpgrade linux-image-4.4.0-1126-snapdragonUpgrade linux-image-3.2.0-143-powerpc64-smpUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-29-generic-lpaeUpgrade linux-image-3.2.0-143-omapUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.0.0-29-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-3.2.0-143-virtualUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1064-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-164-powerpc64-embUpgrade linux-image-4.15.0-64-genericUpgrade linux-image-gcpUpgrade linux-image-3.13.0-173-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-1017-kvmUpgrade linux-image-generic-paeUpgrade linux-image-3.13.0-173-lowlatencyUpgrade linux-image-serverUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.2.0-143-powerpc-smpUpgrade linux-image-4.15.0-64-lowlatencyUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-5.0.0-1017-gcpUpgrade linux-image-3.13.0-173-powerpc-e500Upgrade linux-image-5.0.0-29-genericUpgrade linux-image-3.13.0-173-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-1017-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1056-oemUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1044-gcpUpgrade linux-image-4.15.0-1025-oracleUpgrade linux-image-4.4.0-164-generic | Sep 19, 2019 | Sep 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub