vulnerability
SUSE: CVE-2019-18660: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 2 | (AV:L/AC:M/Au:N/C:P/I:N/A:N) | Nov 27, 2019 | Dec 7, 2019 | Feb 4, 2022 |
Severity
2
CVSS
(AV:L/AC:M/Au:N/C:P/I:N/A:N)
Published
Nov 27, 2019
Added
Dec 7, 2019
Modified
Feb 4, 2022
Description
The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.
Solution(s)
suse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-docssuse-upgrade-kernel-obs-build
References
- SUSE-SUSE-SU-2019:3200-1
- SUSE-SUSE-SU-2019:3289-1
- SUSE-SUSE-SU-2019:3316-1
- SUSE-SUSE-SU-2019:3317-1
- SUSE-SUSE-SU-2019:3371-1
- SUSE-SUSE-SU-2019:3372-1
- SUSE-SUSE-SU-2019:3379-1
- SUSE-SUSE-SU-2019:3381-1
- SUSE-SUSE-SU-2020:0093-1
- SUSE-SUSE-SU-2020:0599-1
- SUSE-SUSE-SU-2020:0613-1
- SUSE-SUSE-SU-2020:1255-1
- SUSE-SUSE-SU-2020:14354-1
- UBUNTU-USN-4225-1
- UBUNTU-USN-4225-2
- UBUNTU-USN-4226-1
- UBUNTU-USN-4227-1
- UBUNTU-USN-4227-2
- UBUNTU-USN-4228-1
- UBUNTU-USN-4228-2
- NVD-CVE-2019-18660
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.