A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 12, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.38.0.1.101.4 on Solaris 11.4 | Nov 17, 2021 | Nov 12, 2020 |
| Suse | — | Upgrade docker-rootless-extrasUpgrade containerdUpgrade rootlesskitUpgrade dockerUpgrade docker-fish-completionUpgrade docker-zsh-completionUpgrade runcUpgrade docker-bash-completion | Aug 9, 2024 | Nov 12, 2020 |
| Ubuntu | — | Upgrade linux-image-5.8.0-1016-azureUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-34-generic-lpaeUpgrade linux-image-5.8.0-1014-kvmUpgrade linux-image-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-34-lowlatencyUpgrade linux-image-5.8.0-34-generic-64kUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.8.0-1014-oracleUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.8.0-1017-awsUpgrade linux-image-raspiUpgrade linux-image-5.8.0-1011-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.8.0-34-genericUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.8.0-1011-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.8.0-1015-gcpUpgrade linux-image-oracle | Jan 6, 2021 | Nov 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub