PT-2020-10140 · Linux+4 · Linux+4
Prasad J Pandit
·
Published
2019-11-18
·
Updated
2024-06-15
·
CVE-2019-19338
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux upstream kernel versions prior to 5.5
Description
A flaw was found in the fix for a previous issue, related to how Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error occurs. This issue affects guests running on Cascade Lake CPUs and requires that the host has 'TSX' enabled. The flaw allows for the confidentiality of data to be compromised.
Recommendations
For Linux upstream kernel versions prior to 5.5, update to version 5.5 or later to resolve the issue. As a temporary workaround, consider disabling the TSX feature on the host CPU to minimize the risk of exploitation. Restrict access to sensitive data on guests running on affected hosts until the issue is resolved.
Fix
Side Channel Attack
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Linux
Red Hat
Suse