A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-4.14.181-142.260Upgrade kernel-livepatch-4.14.181-142.260-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.186-146.268Upgrade kernel-debuginfo-common-x86_64 | Jul 23, 2020 | Jul 23, 2020 |
| Amazon_linux | — | Upgrade kernel | Jul 18, 2020 | Jun 19, 2020 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-193Upgrade kpatch-patch-4_18_0-193-debugsourceUpgrade kpatch-patch-4_18_0-193_1_2Upgrade kpatch-patch-4_18_0-193_1_2-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-193-debuginfoUpgrade kpatch-patch-4_18_0-193_6_3-debuginfoUpgrade kpatch-patch-4_18_0-193_6_3Upgrade kpatch-patch-4_18_0-193_1_2-debugsourceUpgrade kpatch-patch-4_18_0-193_6_3-debugsourceUpgrade kernel-rt | Jul 23, 2020 | Jul 21, 2020 |
| Debian | — | Upgrade linux | Aug 17, 2020 | Aug 17, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-sourceUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-devel | Jul 31, 2020 | Jul 30, 2020 |
| Oracle_linux | — | Upgrade kernel | Jul 25, 2020 | Jun 9, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 15, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 23, 2020 | Jul 21, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default | Jun 20, 2020 | Jun 19, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1080-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.3.0-1032-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.4.0-1023-azureUpgrade linux-image-5.0.0-1045-gkeUpgrade linux-image-4.4.0-186-powerpc-e500mcUpgrade linux-image-5.3.0-1030-raspi2Upgrade linux-image-5.3.0-64-lowlatencyUpgrade linux-image-4.4.0-186-powerpc-smpUpgrade linux-image-4.15.0-1067-gkeUpgrade linux-image-5.4.0-45-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1068-raspi2Upgrade linux-image-gke-5.0Upgrade linux-image-azureUpgrade linux-image-5.4.0-1022-gcpUpgrade linux-image-gkeop-5.3Upgrade linux-image-5.3.0-64-generic-lpaeUpgrade linux-image-4.4.0-1111-awsUpgrade linux-image-genericUpgrade linux-image-5.4.0-45-genericUpgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1081-gcpUpgrade linux-image-4.15.0-1094-oemUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-115-genericUpgrade linux-image-oem-osp1Upgrade linux-image-azure-edgeUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-186-powerpc64-embUpgrade linux-image-4.4.0-1140-snapdragonUpgrade linux-image-4.4.0-186-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1065-oem-osp1Upgrade linux-image-4.4.0-1075-awsUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-186-powerpc64-smpUpgrade linux-image-5.4.0-1016-raspiUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.4.0-1022-awsUpgrade linux-image-4.15.0-115-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-45-lowlatencyUpgrade linux-image-awsUpgrade linux-image-gke-5.4Upgrade linux-image-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-5.3.0-1032-gcpUpgrade linux-image-4.4.0-186-lowlatencyUpgrade linux-image-4.15.0-1084-snapdragonUpgrade linux-image-4.15.0-1093-azureUpgrade linux-image-4.15.0-1051-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1022-oracleUpgrade linux-image-4.15.0-1072-kvmUpgrade linux-image-5.3.0-1034-azureUpgrade linux-image-oemUpgrade linux-image-4.4.0-186-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1077-kvmUpgrade linux-image-aws-edgeUpgrade linux-image-4.15.0-115-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.3.0-1032-gkeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-1136-raspi2Upgrade linux-image-gke-5.3Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.3.0-64-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.3.0-1030-oracle | Aug 5, 2020 | Jun 19, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub