A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 12, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.38.0.1.101.4 on Solaris 11.4 | Nov 17, 2021 | Nov 12, 2020 |
| Suse | — | Upgrade docker-fish-completionUpgrade containerdUpgrade rootlesskitUpgrade docker-rootless-extrasUpgrade dockerUpgrade runcUpgrade docker-zsh-completionUpgrade docker-bash-completion | Aug 9, 2024 | Nov 12, 2020 |
| Ubuntu | — | Upgrade linux-image-5.8.0-1015-gcpUpgrade linux-image-5.8.0-1011-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.8.0-34-genericUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-5.8.0-34-generic-64kUpgrade linux-image-gkeUpgrade linux-image-5.8.0-1016-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-1017-awsUpgrade linux-image-5.8.0-34-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-34-lowlatencyUpgrade linux-image-5.8.0-1014-kvmUpgrade linux-image-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1014-oracleUpgrade linux-image-azureUpgrade linux-image-5.8.0-1011-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-kvm | Jan 6, 2021 | Nov 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub