In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Mar 12, 2020 | Sep 13, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-sourceUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel | Sep 30, 2019 | Sep 13, 2019 |
| Oracle_linux | — | Upgrade kernel | Oct 5, 2022 | Sep 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 13, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel | Mar 12, 2020 | Sep 13, 2019 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-extra | Sep 21, 2019 | Sep 13, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-aws-hweUpgrade linux-image-powerpcUpgrade linux-image-4.15.0-64-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-3.2.0-143-generic-paeUpgrade linux-image-3.13.0-173-genericUpgrade linux-image-4.4.0-164-powerpc-e500mcUpgrade linux-image-virtualUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1046-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-173-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-3.13.0-173-powerpc64-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.2.0-143-genericUpgrade linux-image-4.15.0-1047-raspi2Upgrade linux-image-4.4.0-164-generic-lpaeUpgrade linux-image-4.4.0-1058-kvmUpgrade linux-image-4.15.0-1050-awsUpgrade linux-image-omapUpgrade linux-image-oracleUpgrade linux-image-4.4.0-164-lowlatencyUpgrade linux-image-5.0.0-1017-raspi2Upgrade linux-image-4.4.0-1094-awsUpgrade linux-image-4.4.0-1122-raspi2Upgrade linux-image-4.15.0-1059-azureUpgrade linux-image-4.4.0-164-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-1054-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-173-powerpc64-embUpgrade linux-image-5.0.0-1020-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-highbankUpgrade linux-image-oemUpgrade linux-image-3.2.0-143-highbankUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1044-gkeUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1016-awsUpgrade linux-image-gke-4.15Upgrade linux-image-azureUpgrade linux-image-5.0.0-1017-kvmUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1064-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-173-generic-lpaeUpgrade linux-image-4.4.0-164-powerpc64-embUpgrade linux-image-4.15.0-64-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-173-powerpc-smpUpgrade linux-image-5.0.0-1021-snapdragonUpgrade linux-image-5.0.0-29-generic-lpaeUpgrade linux-image-5.0.0-1017-gkeUpgrade linux-image-3.13.0-173-powerpc-e500Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-3.2.0-143-powerpc64-smpUpgrade linux-image-4.15.0-1044-gcpUpgrade linux-image-5.0.0-29-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-64-lowlatencyUpgrade linux-image-4.4.0-164-powerpc-smpUpgrade linux-image-generic-paeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.0.0-29-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.2.0-143-powerpc-smpUpgrade linux-image-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-164-genericUpgrade linux-image-5.0.0-1017-gcpUpgrade linux-image-3.2.0-143-omapUpgrade linux-image-4.4.0-1126-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1056-oemUpgrade linux-image-4.15.0-1025-oracleUpgrade linux-image-3.2.0-143-virtualUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-serverUpgrade linux-image-kvmUpgrade linux-image-3.13.0-173-lowlatencyUpgrade linux-image-powerpc64-smp | Sep 19, 2019 | Sep 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub