ALT-PU-2019-3205-1

Package update kernel-image-std-debug in branch p8

Version4.9.205-alt0.M80P.1

Published2019-11-29

Max severityMEDIUM

Severity:

Closed issues (2)

MEDIUM4.7

Уязвимость компонентов arch/powerpc/kernel/entry_64.S и arch/powerpc/kernel/security.c ядра операционной системы Linux, позволяющая нарушителю получить несанкционированный доступ к информации

Published: 2020-06-26Modified: 2024-09-16

CVSS 3.xMEDIUM 4.7

CVSS:3.x/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS 2.0MEDIUM 4.7

CVSS:2.0/AV:L/AC:M/Au:N/C:C/I:N/A:N

References

CVE-2019-18660

MEDIUM4.7

The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.

Published: 2019-11-27Modified: 2024-11-21

CVSS 2.0LOW 1.9

CVSS:2.0/AV:L/AC:M/Au:N/C:P/I:N/A:N

CVSS 3.xMEDIUM 4.7

CVSS:3.x/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References