A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 12, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.38.0.1.101.4 on Solaris 11.4 | Nov 17, 2021 | Nov 12, 2020 |
| Suse | — | Upgrade docker-fish-completionUpgrade rootlesskitUpgrade dockerUpgrade docker-rootless-extrasUpgrade containerdUpgrade docker-zsh-completionUpgrade runcUpgrade docker-bash-completion | Aug 9, 2024 | Nov 12, 2020 |
| Ubuntu | — | Upgrade linux-image-5.8.0-1011-raspiUpgrade linux-image-5.8.0-34-genericUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.8.0-1015-gcpUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.8.0-34-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-1016-azureUpgrade linux-image-5.8.0-34-lowlatencyUpgrade linux-image-5.8.0-1017-awsUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1014-oracleUpgrade linux-image-5.8.0-34-generic-64kUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.8.0-1014-kvmUpgrade linux-image-5.8.0-1011-raspi-nolpae | Jan 6, 2021 | Nov 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub