The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Jan 22, 2020 | Nov 27, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-headers | Feb 24, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-sourceUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade perfUpgrade kernelUpgrade kernel-headers | Jan 3, 2020 | Nov 27, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Nov 28, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 27, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel | Jan 22, 2020 | Nov 27, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Dec 7, 2019 | Nov 27, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.0.0-38-genericUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-4.4.0-1131-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-171-powerpc64-embUpgrade linux-image-4.4.0-171-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-4.4.0-171-genericUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1127-raspi2Upgrade linux-image-4.4.0-171-generic-lpaeUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-virtualUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1064-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-aws-lts-18.04Upgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-oracle-edgeUpgrade linux-image-4.4.0-171-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-171-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1060-awsUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-azureUpgrade linux-image-4.4.0-1100-awsUpgrade linux-image-gcpUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-1009-azureUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-awsUpgrade linux-image-4.15.0-1066-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-aws-edgeUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-171-powerpc-e500mcUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-azure-edge | Jan 8, 2020 | Nov 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub