A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 12, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.38.0.1.101.4 on Solaris 11.4 | Nov 17, 2021 | Nov 12, 2020 |
| Suse | — | Upgrade rootlesskitUpgrade docker-fish-completionUpgrade dockerUpgrade docker-rootless-extrasUpgrade containerdUpgrade runcUpgrade docker-bash-completionUpgrade docker-zsh-completion | Aug 9, 2024 | Nov 12, 2020 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1014-kvmUpgrade linux-image-5.8.0-34-generic-lpaeUpgrade linux-image-5.8.0-34-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.8.0-1014-oracleUpgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.8.0-1016-azureUpgrade linux-image-5.8.0-1011-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-34-lowlatencyUpgrade linux-image-5.8.0-1017-awsUpgrade linux-image-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.8.0-34-genericUpgrade linux-image-oracleUpgrade linux-image-5.8.0-1015-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.8.0-1011-raspiUpgrade linux-image-virtualUpgrade linux-image-lowlatency | Jan 6, 2021 | Nov 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub