PT-2019-5797 · Linux+3 · Linux Kernel+3

David Gibson · Published 2019-04-21 · Updated 2021-05-28 · CVE-2020-11669

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2

Description The issue is related to errors in saving and restoring the state of register masks for power save functionality, specifically PNV POWERSAVE AMR, PNV POWERSAVE UAMOR, and PNV POWERSAVE AMOR, in the Linux kernel on the powerpc platform. This could allow an attacker to cause a denial of service.

Recommendations For Linux kernel versions prior to 5.2, update to version 5.2 or later to resolve the issue. As a temporary workaround, consider disabling the idle book3s functionality until a patch is available. Restrict access to the affected arch/powerpc/kernel/idle book3s.S file to minimize the risk of exploitation. Avoid using the PNV POWERSAVE AMR, PNV POWERSAVE UAMOR, and PNV POWERSAVE AMOR registers in the affected kernel functionality until the issue is resolved.

Fix

Weakness Enumeration

CWE-399

CWE-393

Related Identifiers

ALT-PU-2019-2321

ALT-PU-2019-2339

ALT-PU-2019-2488

ALT-PU-2019-2746

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

BDU:2021-02579

CVE-2020-11669

OPENSUSE-SU-2020:0543-1

OPENSUSE-SU-2020_0543-1

RHSA-2021:1379

SUSE-SU-2020:1085-1

SUSE-SU-2020:1087-1

SUSE-SU-2020:1118-1

SUSE-SU-2020:1119-1

SUSE-SU-2020:1141-1

SUSE-SU-2020:1142-1

SUSE-SU-2020:1146-1

SUSE-SU-2020:1663-1

SUSE-SU-2020:2478-1

SUSE-SU-2020:2487-1

SUSE-SU-2020_1663-1

USN-4363-1

USN-4368-1

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 602

• https://github.com/torvalds/linux/commit/53a712bae5dd919521a58d7bad773b949358add0 · Vendor Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=53a712bae5dd919521a58d7bad773b949358add0 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-11565 · Vendor Advisory
• https://usn.ubuntu.com/4363-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1087-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-11669 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2020:1085-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-11669 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0543-1 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20200430-0001 · Patch
• https://lists.ozlabs.org/pipermail/linuxppc-dev/2020-April/208663.html · Patch
• https://osv.dev/vulnerability/SUSE-SU-2020:1146-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:3517 · Vendor Advisory
• https://usn.ubuntu.com/4368-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4368-1 · Vendor Advisory