In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Apr 8, 2020 | Sep 13, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel | Sep 30, 2019 | Sep 13, 2019 |
| Oracle_linux | — | Upgrade kernel | Oct 5, 2022 | Sep 13, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 13, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Apr 8, 2020 | Sep 13, 2019 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extra | Sep 21, 2019 | Sep 13, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-3.2.0-143-highbankUpgrade linux-image-4.4.0-1058-kvmUpgrade linux-image-5.0.0-1017-gcpUpgrade linux-image-4.15.0-1047-raspi2Upgrade linux-image-3.2.0-143-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1122-raspi2Upgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-173-powerpc64-smpUpgrade linux-image-5.0.0-1016-awsUpgrade linux-image-3.2.0-143-generic-paeUpgrade linux-image-powerpcUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-164-lowlatencyUpgrade linux-image-genericUpgrade linux-image-highbankUpgrade linux-image-4.15.0-64-generic-lpaeUpgrade linux-image-3.13.0-173-genericUpgrade linux-image-5.0.0-1020-azureUpgrade linux-image-4.4.0-164-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-5.0.0-1017-raspi2Upgrade linux-image-3.13.0-173-powerpc64-embUpgrade linux-image-omapUpgrade linux-image-powerpc-e500Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1046-kvmUpgrade linux-image-4.15.0-1044-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-164-powerpc-e500mcUpgrade linux-image-3.13.0-173-powerpc-e500mcUpgrade linux-image-4.15.0-1064-snapdragonUpgrade linux-image-4.4.0-1094-awsUpgrade linux-image-4.15.0-1050-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-164-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-1017-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1056-oemUpgrade linux-image-oracleUpgrade linux-image-3.13.0-173-powerpc-e500Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-64-genericUpgrade linux-image-4.4.0-164-genericUpgrade linux-image-5.0.0-29-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.0.0-1021-snapdragonUpgrade linux-image-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-3.13.0-173-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-164-powerpc-smpUpgrade linux-image-3.2.0-143-powerpc64-smpUpgrade linux-image-5.0.0-29-genericUpgrade linux-image-3.2.0-143-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1059-azureUpgrade linux-image-4.4.0-1126-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1044-gcpUpgrade linux-image-3.13.0-173-lowlatencyUpgrade linux-image-4.15.0-1025-oracleUpgrade linux-image-generic-paeUpgrade linux-image-5.0.0-1017-gkeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-3.2.0-143-virtualUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-164-powerpc64-embUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-3.2.0-143-omapUpgrade linux-image-serverUpgrade linux-image-3.13.0-173-generic-lpaeUpgrade linux-image-4.15.0-64-lowlatencyUpgrade linux-image-5.0.0-29-generic-lpae | Sep 19, 2019 | Sep 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub