Name: CVE-2020-12912: Exposed Dangerous Method or Function
Creator: Rapid7
Published: 2020-11-12T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-12912, CWE-749, CWE-203, CVSS 5.5, EPSS 0.01205

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.

CVSS Details

CVSS 3.1 Base Score: 5.5
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade linux	Jul 30, 2024	Nov 12, 2020
Oracle Solaris	—	Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.38.0.1.101.4 on Solaris 11.4	Nov 17, 2021	Nov 12, 2020
Suse	—	Upgrade runcUpgrade docker-bash-completionUpgrade docker-zsh-completionUpgrade containerdUpgrade dockerUpgrade docker-fish-completionUpgrade docker-rootless-extrasUpgrade rootlesskit	Aug 9, 2024	Nov 12, 2020
Ubuntu	—	Upgrade linux-image-5.8.0-1015-gcpUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.8.0-34-genericUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-5.8.0-1011-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.8.0-1014-oracleUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-5.8.0-1017-awsUpgrade linux-image-5.8.0-1014-kvmUpgrade linux-image-5.8.0-1011-raspi-nolpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-5.8.0-34-lowlatencyUpgrade linux-image-5.8.0-34-generic-lpaeUpgrade linux-image-5.8.0-34-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-1016-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp	Jan 6, 2021	Nov 12, 2020

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence