In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Apr 8, 2020 | Sep 13, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade python3-perfUpgrade kernelUpgrade perfUpgrade kernel-devel | Sep 30, 2019 | Sep 13, 2019 |
| Oracle_linux | — | Upgrade kernel | Oct 5, 2022 | Sep 13, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 13, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel | Apr 8, 2020 | Sep 13, 2019 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docs | Sep 21, 2019 | Sep 13, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-64-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.2.0-143-virtualUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-1017-gkeUpgrade linux-image-generic-paeUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1059-azureUpgrade linux-image-4.4.0-164-powerpc-smpUpgrade linux-image-3.13.0-173-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-4.4.0-164-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1126-snapdragonUpgrade linux-image-4.15.0-1056-oemUpgrade linux-image-3.2.0-143-omapUpgrade linux-image-3.2.0-143-powerpc-smpUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-3.13.0-173-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.0.0-1021-snapdragonUpgrade linux-image-4.4.0-164-genericUpgrade linux-image-4.15.0-1044-gcpUpgrade linux-image-5.0.0-29-lowlatencyUpgrade linux-image-3.2.0-143-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1017-kvmUpgrade linux-image-kvmUpgrade linux-image-5.0.0-29-genericUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-64-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-29-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1025-oracleUpgrade linux-image-gcpUpgrade linux-image-3.13.0-173-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-serverUpgrade linux-image-3.13.0-173-powerpc-e500Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpcUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-164-powerpc64-smpUpgrade linux-image-3.13.0-173-genericUpgrade linux-image-4.15.0-64-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-164-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1064-snapdragonUpgrade linux-image-4.15.0-1047-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-highbankUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-1050-awsUpgrade linux-image-4.4.0-1094-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.2.0-143-genericUpgrade linux-image-5.0.0-1016-awsUpgrade linux-image-4.4.0-1122-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-3.13.0-173-powerpc64-smpUpgrade linux-image-3.2.0-143-generic-paeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-173-powerpc-e500mcUpgrade linux-image-3.13.0-173-powerpc64-embUpgrade linux-image-4.4.0-164-lowlatencyUpgrade linux-image-3.2.0-143-highbankUpgrade linux-image-4.15.0-1044-gkeUpgrade linux-image-4.15.0-1046-kvmUpgrade linux-image-5.0.0-1020-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-omapUpgrade linux-image-4.4.0-164-powerpc-e500mcUpgrade linux-image-5.0.0-1017-raspi2Upgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1058-kvmUpgrade linux-image-generic-lts-trustyUpgrade linux-image-5.0.0-1017-gcp | Sep 19, 2019 | Sep 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub