PT-2019-4895 · Linux+5 · Linux Kernel+5

Published 2019-09-05 · Updated 2024-06-15 · CVE-2019-15030

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.14 on the powerpc platform

Description A local user can read vector registers of other users' processes via a Facility Unavailable exception. This issue arises due to a missing check in arch/powerpc/kernel/process.c. To exploit this, a local user starts a transaction using the hardware transactional memory instruction tbegin and then accesses vector registers. The vector registers will be corrupted with values from a different local Linux process. This can impact the confidentiality and availability of protected information.

Recommendations For Linux kernel versions prior to 5.2.14 on the powerpc platform, consider restricting access to the tbegin instruction and the affected vector registers to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

RCE

Weakness Enumeration

CWE-862

CWE-20

Related Identifiers

ALT-PU-2019-2698

ALT-PU-2019-2700

ALT-PU-2019-2701

ALT-PU-2019-2745

ALT-PU-2019-2746

ALT-PU-2019-2768

ALT-PU-2019-2890

ALT-PU-2020-1025

ALT-PU-2020-1070

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1745

ALT-PU-2021-1870

BDU:2020-01488

CESA-2020_1372

CVE-2019-15030

OPENSUSE-SU-2019:2173-1

OPENSUSE-SU-2019:2181-1

OPENSUSE-SU-2019_2173-1

OPENSUSE-SU-2019_2181-1

OPENSUSE-SU-2024:10728-1

OPENSUSE-SU-2024:13704-1

RHSA-2020:0740

RHSA-2020:1372

RHSA-2020_1372

SUSE-SU-2019:2412-1

SUSE-SU-2019:2414-1

SUSE-SU-2019:2424-1

SUSE-SU-2019:2648-1

SUSE-SU-2019:2651-1

SUSE-SU-2019:2658-1

SUSE-SU-2019:2738-1

SUSE-SU-2019:2756-1

SUSE-SU-2019:3200-1

SUSE-SU-2020:0093-1

USN-4135-1

USN-4135-2

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 1108

• 🔥 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8205d5d98ef7f155de211f5e2eb6ca03d95a5a60 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-15030 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4135-2 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-15030 · Security Note
• https://ubuntu.com/security/notices/USN-4135-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10728-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15030 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2019-15030 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2658-1 · Vendor Advisory
• https://usn.ubuntu.com/4135-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-14835 · Vendor Advisory
• https://usn.ubuntu.com/4135-2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2738-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0093-1 · Vendor Advisory