PT-2019-2536 · Linux+3 · Linux Kernel+3
CVSS v4.0
5.7
Média
| Vetor | AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.20.6
Description
The issue is related to undesirable out-of-bounds speculation on pointer arithmetic in the Linux kernel, specifically in kernel/bpf/verifier.c. This can lead to side-channel attacks. The vulnerability is associated with pointer offset beyond permissible values, which can be exploited to implement side-channel attacks.
Recommendations
For Linux kernel versions prior to 4.20.6, update to version 4.20.6 or later to resolve the issue.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Suse
Ubuntu