vulnerability

Red Hat OpenShift: CVE-2019-18660: kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure

Try Surface Command
Back to search
Severity
2
CVSS
(AV:L/AC:M/Au:N/C:P/I:N/A:N)
Published
Nov 27, 2019
Added
Dec 29, 2020
Modified
Apr 11, 2025

Description

The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.

Solution

linuxrpm-upgrade-redhat-coreos

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today