Name: CVE-2020-4788: Undefined Security Weakness
Creator: Rapid7
Published: 2020-11-20T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-4788, CVSS 4.7, EPSS 0.00198

IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296.

CVSS Details

CVSS 3.1 Base Score: 4.7
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
CVSS 3.0 Base Score: 5.1
CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade python3-perfUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-docUpgrade perfUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-modules	May 13, 2022	Nov 20, 2020
Centos_linux	—	Upgrade kernel	May 13, 2022	Nov 20, 2020
Debian	—	Upgrade linux	Dec 7, 2020	Nov 20, 2020
Huawei Euleros 2_0_sp5	—	Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel	Mar 24, 2021	Nov 20, 2020
Huawei Euleros 2_0_sp8	—	Upgrade kernel-sourceUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade perfUpgrade kernel-devel	Dec 15, 2020	Nov 20, 2020
Ibm Aix	—	Apply the fix or workaround for power9_advisory	Nov 20, 2020	Nov 19, 2020
Oracle_linux	—	Upgrade kernelUpgrade kernel-uek	Jun 15, 2021	Nov 20, 2020
Redhat_linux	—	No solution existsUpgrade kernel	May 13, 2022	Nov 20, 2020
Rocky_linux	—	Upgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-debug-debuginfoUpgrade perfUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftool-debuginfo	Mar 5, 2024	Nov 20, 2020
Suse	—	Upgrade kernel-vanilla-develUpgrade kernel-debug-baseUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-vanilla-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-zfcpdump-manUpgrade kernel-vanilla-baseUpgrade kernel-vanillaUpgrade kernel-default-extra	Dec 12, 2020	Nov 20, 2020
Ubuntu	—	Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1119-awsUpgrade linux-image-5.4.0-1023-raspiUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1082-awsUpgrade linux-image-oem-osp1Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.8.0-1014-awsUpgrade linux-image-5.8.0-31-generic-64kUpgrade linux-image-kvmUpgrade linux-image-5.8.0-31-lowlatencyUpgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-5.4.0-56-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.8.0-1013-azureUpgrade linux-image-5.8.0-1008-raspiUpgrade linux-image-5.4.0-1030-awsUpgrade linux-image-4.15.0-126-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1059-oracleUpgrade linux-image-4.4.0-198-genericUpgrade linux-image-5.8.0-1011-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-1142-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1103-oemUpgrade linux-image-5.4.0-1030-oracleUpgrade linux-image-5.4.0-1028-kvmUpgrade linux-image-5.4.0-1032-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-197-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-powerpc64-embUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-azure-edgeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.8.0-1012-gcpUpgrade linux-image-5.8.0-1011-oracleUpgrade linux-image-4.4.0-198-powerpc-smpUpgrade linux-image-4.4.0-1147-snapdragonUpgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.4.0-56-genericUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-197-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-56-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1100-azureUpgrade linux-image-snapdragonUpgrade linux-image-5.8.0-1008-raspi-nolpaeUpgrade linux-image-4.4.0-1118-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-64kUpgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1030-gcpUpgrade linux-image-4.4.0-1143-raspi2Upgrade linux-image-4.4.0-1146-snapdragonUpgrade linux-image-4.4.0-198-powerpc-e500mcUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-5.8.0-31-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1079-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.8.0-31-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-198-powerpc64-smpUpgrade linux-image-4.4.0-198-lowlatencyUpgrade linux-image-4.15.0-1088-awsUpgrade linux-image-4.4.0-1085-kvmUpgrade linux-image-4.4.0-198-powerpc64-embUpgrade linux-image-4.4.0-1083-awsUpgrade linux-image-aws-hweUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-198-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1074-gke	Dec 2, 2020	Nov 20, 2020

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business