A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Sep 4, 2019 |
| Debian | — | Upgrade linux | Sep 26, 2019 | Sep 4, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-ec2-extra | Sep 21, 2019 | Sep 4, 2019 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-5.0.0-32-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1021-gcpUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1024-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-genericUpgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-32-generic-lpaeUpgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1061-azureUpgrade linux-image-5.0.0-32-lowlatencyUpgrade linux-image-4.15.0-1059-oemUpgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-166-genericUpgrade linux-image-oemUpgrade linux-image-5.0.0-1019-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-66-genericUpgrade linux-image-4.4.0-1128-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-166-generic-lpaeUpgrade linux-image-5.0.0-1020-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1056-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-4.15.0-1052-awsUpgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-5.0.0-1020-raspi2Upgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-5.0.0-1023-azureUpgrade linux-image-5.0.0-1023-gkeUpgrade linux-image-aws | Oct 18, 2019 | Sep 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub