In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Apr 8, 2020 | Sep 13, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perfUpgrade kernel-headersUpgrade kernel-source | Sep 30, 2019 | Sep 13, 2019 |
| Oracle_linux | — | Upgrade kernel | Oct 5, 2022 | Sep 13, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 13, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel | Apr 8, 2020 | Sep 13, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-default | Sep 21, 2019 | Sep 13, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.2.0-143-omapUpgrade linux-image-serverUpgrade linux-image-4.15.0-1059-azureUpgrade linux-image-4.15.0-64-genericUpgrade linux-image-5.0.0-1021-snapdragonUpgrade linux-image-4.15.0-1056-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-1017-kvmUpgrade linux-image-4.15.0-1044-gcpUpgrade linux-image-3.2.0-143-powerpc-smpUpgrade linux-image-3.13.0-173-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-164-powerpc64-embUpgrade linux-image-5.0.0-29-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-173-generic-lpaeUpgrade linux-image-5.0.0-29-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-173-powerpc-smpUpgrade linux-image-4.4.0-164-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-4.15.0-1025-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-5.0.0-1017-gkeUpgrade linux-image-5.0.0-29-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.2.0-143-virtualUpgrade linux-image-4.4.0-1126-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-3.2.0-143-powerpc64-smpUpgrade linux-image-4.4.0-164-genericUpgrade linux-image-3.13.0-173-powerpc-e500Upgrade linux-image-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-64-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-gke-5.0Upgrade linux-image-oracleUpgrade linux-image-generic-paeUpgrade linux-image-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1016-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-64-generic-lpaeUpgrade linux-image-5.0.0-1020-azureUpgrade linux-image-3.2.0-143-generic-paeUpgrade linux-image-4.4.0-164-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-4.15.0-1050-awsUpgrade linux-image-3.2.0-143-highbankUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-173-genericUpgrade linux-image-powerpcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-173-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-164-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-164-lowlatencyUpgrade linux-image-3.2.0-143-genericUpgrade linux-image-4.15.0-1064-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1044-gkeUpgrade linux-image-highbankUpgrade linux-image-4.15.0-1046-kvmUpgrade linux-image-5.0.0-1017-gcpUpgrade linux-image-4.4.0-1094-awsUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1047-raspi2Upgrade linux-image-3.13.0-173-powerpc64-smpUpgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-1017-raspi2Upgrade linux-image-4.4.0-164-powerpc-e500mcUpgrade linux-image-generic-lts-trustyUpgrade linux-image-omapUpgrade linux-image-4.4.0-1122-raspi2Upgrade linux-image-4.4.0-1058-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-173-powerpc64-emb | Sep 19, 2019 | Sep 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub