The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Jan 22, 2020 | Nov 27, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-tools | Feb 24, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel | Jan 3, 2020 | Nov 27, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Nov 28, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 27, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel | Jan 22, 2020 | Nov 27, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docs | Dec 7, 2019 | Nov 27, 2019 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-aws-hweUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-4.4.0-1060-awsUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-5.3.0-1009-azureUpgrade linux-image-aws-edgeUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1066-azureUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-4.4.0-171-lowlatencyUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-4.4.0-1100-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-4.4.0-171-powerpc-e500mcUpgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-awsUpgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-5.0.0-38-genericUpgrade linux-image-oracle-edgeUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-4.4.0-171-powerpc64-smpUpgrade linux-image-4.4.0-171-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.3.0-1009-awsUpgrade linux-image-4.4.0-1127-raspi2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-171-generic-lpaeUpgrade linux-image-4.4.0-1131-snapdragonUpgrade linux-image-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1066-oemUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-171-powerpc64-embUpgrade linux-image-4.4.0-1064-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-74-genericUpgrade linux-image-4.4.0-171-genericUpgrade linux-image-oemUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-powerpc64-smp | Jan 8, 2020 | Nov 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub