Skip to content
OpenAdvisories
Unscored Public exploit CVE-2019-11157 EUVD-2019-2861GHSA-r3vh-cpmh-5vhc

Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of …

Published Dec 16, 2019 · Updated Aug 4, 2024 · Assigned by intel

Package: intel-microcode Ecosystem: Ubuntu

Description

Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege and/or information disclosure via local access.

Affected products

VendorProductAffectedFixed
— Intel(R) Processors See References —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS intel-microcode 3.20191115.1ubuntu0.18.04.1 —
Ubuntu 16.04 LTS intel-microcode 3.20191115.1ubuntu0.16.04.1 —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 14.04 LTS intel-microcode 3.20191115.1ubuntu0.14.04.1 —

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed spectre-meltdown-checker 26.36.0602723-1.1 openSUSE-SU-2026:11242-1

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • zkenjar/v0ltpwn ★ 7 · Dec 15, 2019

    Tool Suite for V0LTpwn (CVE-2019-11157). Code will be published soon.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 2

References