Summary
Andrei Vlad Lutas and Dan Lutas discovered that some x86 processors
incorrectly handle SWAPGS instructions during speculative execution. A
local attacker could use this to expose sensitive information (kernel
memory).
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws-hwe | 4.15.0-1045.47~16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1045.47 |
Vulnerabilities 1
-
Medium 5.6CVE-2019-1125 Public exploit
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability,…
References
-
report
https://ubuntu.com/security/CVE-2019-1125