Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-12912

Опубликовано: 12 нояб. 2020
Источник: debian

Описание

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
linuxfixed5.9.9-1package
linuxnot-affectedbusterpackage
linuxnot-affectedstretchpackage

Примечания

  • https://lore.kernel.org/stable/238e3cf7-582f-a265-5300-9b44948107b0@roeck-us.net/T/#ma48754bff34127867149bf466fc2f9c2deea3960

  • https://bugzilla.redhat.com/show_bug.cgi?id=1897402

  • https://support.lenovo.com/lu/uk/product_security/LEN-50481

  • CONFIG_SENSORS_AMD_ENERGY not enabled in Debian builds

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 5 лет назад

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.

CVSS3: 5.5
redhat
около 5 лет назад

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.

CVSS3: 5.5
nvd
около 5 лет назад

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.

github
больше 3 лет назад

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.

suse-cvrf
около 2 лет назад

Security update for docker, rootlesskit