ALT-PU-2019-2698: package kernel-image-std-pae update to version 4.19.73-alt1
Описание
This update upgrades kernel-image-std-pae to version 4.19.73-alt1.
Устраненные уязвимости4
Связанные уязвимости
ELSA-2020-1372: kernel security and bug fix update (MODERATE)
ALT-PU-2019-2701: package `kernel-image-std-def` update to version 4.19.73-alt1
ALT-PU-2019-2745: package `kernel-image-mp` update to version 5.2.16-alt1
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.