Summary
Moritz Lipp, Michael Schwarz, Andreas Kogler, David Oswald, Catherine
Easdon, Claudio Canella, and Daniel Gruss discovered that the Intel Running
Average Power Limit (RAPL) driver in the Linux kernel did not properly
restrict access to power data. A local attacker could possibly use this to
expose sensitive information.
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux | 4.4.0-194.226 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gcp | 4.15.0-1087.100~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.15.0-123.126~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-oracle | 4.15.0-1058.64~16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-123.126 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-4.15 | 4.15.0-1087.100 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-5.4 | 5.4.0-1029.31~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-4.15 | 4.15.0-1073.78 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-5.3 | 5.3.0-1039.42 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe | 5.3.0-69.65 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe-5.4 | 5.4.0-53.59~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oem | 4.15.0-1101.112 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oem-osp1 | 5.0.0-1071.77 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle | 4.15.0-1058.64 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle-5.4 | 5.4.0-1029.31~18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux | 5.4.0-53.59 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gcp | 5.4.0-1029.31 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle | 5.4.0-1029.31 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux | 3.13.0-183.234 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-lts-xenial | 4.4.0-194.226~14.04.1 |
Vulnerabilities 1
-
Unscored —CVE-2020-8694 Public exploit
Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to …
References
-
report
https://ubuntu.com/security/CVE-2020-8694