In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Apr 8, 2020 | Sep 13, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel | Sep 30, 2019 | Sep 13, 2019 |
| Oracle_linux | — | Upgrade kernel | Oct 5, 2022 | Sep 13, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 13, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel | Apr 8, 2020 | Sep 13, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-default | Sep 21, 2019 | Sep 13, 2019 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-3.13.0-173-generic-lpaeUpgrade linux-image-4.4.0-164-powerpc64-embUpgrade linux-image-5.0.0-29-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1056-oemUpgrade linux-image-3.2.0-143-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-29-genericUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1044-gcpUpgrade linux-image-3.2.0-143-virtualUpgrade linux-image-4.4.0-164-genericUpgrade linux-image-3.13.0-173-powerpc-e500Upgrade linux-image-3.2.0-143-powerpc-smpUpgrade linux-image-3.2.0-143-omapUpgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-64-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-29-lowlatencyUpgrade linux-image-serverUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-paeUpgrade linux-image-5.0.0-1017-gkeUpgrade linux-image-4.15.0-1059-azureUpgrade linux-image-azureUpgrade linux-image-4.15.0-1025-oracleUpgrade linux-image-4.4.0-1126-snapdragonUpgrade linux-image-4.4.0-164-powerpc-smpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.0.0-1017-kvmUpgrade linux-image-4.15.0-64-genericUpgrade linux-image-3.13.0-173-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-1021-snapdragonUpgrade linux-image-3.13.0-173-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-4.4.0-164-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-3.13.0-173-powerpc64-embUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-164-powerpc64-smpUpgrade linux-image-3.13.0-173-genericUpgrade linux-image-5.0.0-1020-azureUpgrade linux-image-omapUpgrade linux-image-5.0.0-1016-awsUpgrade linux-image-4.15.0-1046-kvmUpgrade linux-image-4.4.0-1058-kvmUpgrade linux-image-4.4.0-164-lowlatencyUpgrade linux-image-5.0.0-1017-raspi2Upgrade linux-image-3.2.0-143-highbankUpgrade linux-image-oemUpgrade linux-image-4.4.0-164-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-1044-gkeUpgrade linux-image-genericUpgrade linux-image-3.13.0-173-powerpc64-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-1017-gcpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1064-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1094-awsUpgrade linux-image-3.2.0-143-genericUpgrade linux-image-highbankUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-1050-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1122-raspi2Upgrade linux-image-3.13.0-173-powerpc-e500mcUpgrade linux-image-powerpcUpgrade linux-image-3.2.0-143-generic-paeUpgrade linux-image-4.15.0-64-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1047-raspi2 | Sep 19, 2019 | Sep 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub