A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.186-146.268Upgrade kernel-toolsUpgrade kernelUpgrade kernel-livepatch-4.14.181-142.260-debuginfoUpgrade kernel-livepatch-4.14.181-142.260Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64 | Jul 23, 2020 | Jul 23, 2020 |
| Amazon_linux | — | Upgrade kernel | Jul 18, 2020 | Jun 19, 2020 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-193_1_2-debugsourceUpgrade kpatch-patch-4_18_0-193_6_3-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-193_6_3Upgrade kpatch-patch-4_18_0-193_6_3-debuginfoUpgrade kpatch-patch-4_18_0-193_1_2-debuginfoUpgrade kpatch-patch-4_18_0-193Upgrade kpatch-patch-4_18_0-193-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-193_1_2Upgrade kpatch-patch-4_18_0-193-debugsource | Jul 23, 2020 | Jul 21, 2020 |
| Debian | — | Upgrade linux | Aug 17, 2020 | Aug 17, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade python3-perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade kernel-toolsUpgrade perfUpgrade bpftool | Jul 31, 2020 | Jul 30, 2020 |
| Oracle_linux | — | Upgrade kernel | Jul 25, 2020 | Jun 9, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 15, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 23, 2020 | Jul 21, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default-extra | Jun 20, 2020 | Jun 19, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1067-gkeUpgrade linux-image-aws-hweUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.4.0-1022-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-186-powerpc-smpUpgrade linux-image-gkeop-5.3Upgrade linux-image-4.4.0-186-powerpc-e500mcUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-1094-oemUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.4.0-45-generic-lpaeUpgrade linux-image-4.15.0-1081-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.3.0-1032-awsUpgrade linux-image-4.15.0-1080-awsUpgrade linux-image-gke-5.0Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.3.0-64-lowlatencyUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1023-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.3.0-1030-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1140-snapdragonUpgrade linux-image-4.4.0-1111-awsUpgrade linux-image-5.0.0-1065-oem-osp1Upgrade linux-image-4.4.0-186-powerpc64-embUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.0.0-1045-gkeUpgrade linux-image-5.4.0-45-genericUpgrade linux-image-raspiUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-115-genericUpgrade linux-image-5.3.0-64-generic-lpaeUpgrade linux-image-4.15.0-1068-raspi2Upgrade linux-image-4.4.0-186-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-186-powerpc64-smpUpgrade linux-image-5.3.0-1032-gkeUpgrade linux-image-aws-edgeUpgrade linux-image-4.4.0-1136-raspi2Upgrade linux-image-5.4.0-1022-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1077-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-115-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-186-genericUpgrade linux-image-5.3.0-64-genericUpgrade linux-image-gke-5.3Upgrade linux-image-generic-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1072-kvmUpgrade linux-image-4.4.0-186-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.3.0-1030-oracleUpgrade linux-image-5.4.0-45-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-5.3.0-1034-azureUpgrade linux-image-4.15.0-1084-snapdragonUpgrade linux-image-5.4.0-1016-raspiUpgrade linux-image-4.15.0-115-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-5.4.0-1022-awsUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.3.0-1032-gcpUpgrade linux-image-4.15.0-1093-azureUpgrade linux-image-4.15.0-1051-oracleUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-awsUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-powerpc-e500mc | Aug 5, 2020 | Jun 19, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub