A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 12, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.38.0.1.101.4 on Solaris 11.4 | Nov 17, 2021 | Nov 12, 2020 |
| Suse | — | Upgrade containerdUpgrade dockerUpgrade rootlesskitUpgrade docker-fish-completionUpgrade docker-rootless-extrasUpgrade docker-bash-completionUpgrade docker-zsh-completionUpgrade runc | Aug 9, 2024 | Nov 12, 2020 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-5.8.0-34-generic-lpaeUpgrade linux-image-5.8.0-34-generic-64kUpgrade linux-image-5.8.0-1014-kvmUpgrade linux-image-generic-64kUpgrade linux-image-5.8.0-34-lowlatencyUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-5.8.0-1014-oracleUpgrade linux-image-raspiUpgrade linux-image-5.8.0-1017-awsUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-1011-raspi-nolpaeUpgrade linux-image-5.8.0-1016-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-1015-gcpUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-5.8.0-34-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-5.8.0-1011-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpae | Jan 6, 2021 | Nov 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub