medium5.5
CVE-2020-8694
Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosur…
Impact
Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Core I7-8510y Firmware | All versions |
| Intel | Core I7-8500y Firmware | All versions |
| Intel | Core I5-8310y Firmware | All versions |
| Intel | Core I5-8210y Firmware | All versions |
| Intel | Core I5-8200y Firmware | All versions |
| Intel | Core M3-8100y Firmware | All versions |
| Intel | Core I7-7500u Firmware | All versions |
| Intel | Core I7-7510u Firmware | All versions |
| Intel | Core I7-7600u Firmware | All versions |
| Intel | Core I5-7200u Firmware | All versions |
| Intel | Core I5-7210u Firmware | All versions |
| Intel | Core I5-7300u Firmware | All versions |
References
- NVD record
- CVE.org record
- https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf
- https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html
- https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389
- https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf
- https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html
- https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389