medium5.5
CVE-2020-8832
The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain I…
Impact
The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canonical | Ubuntu Linux | Versions 18.04, 14.04, 16.04 |
| Netapp | Cloud Backup | All versions |
| Netapp | Solidfire \& Hci Management Node | All versions |
| Netapp | Steelstore Cloud Integrated Storage | All versions |
| Netapp | Aff 8300 Firmware | All versions |
| Netapp | Aff 8700 Firmware | All versions |
| Netapp | Aff A220 Firmware | All versions |
| Netapp | Aff A320 Firmware | All versions |
| Netapp | Aff A400 Firmware | All versions |
| Netapp | Aff A700s Firmware | All versions |
| Netapp | Aff C190 Firmware | All versions |
| Netapp | H300e Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1862840
- https://security.netapp.com/advisory/ntap-20200430-0004/
- https://usn.ubuntu.com/usn/usn-4302-1
- https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1862840
- https://security.netapp.com/advisory/ntap-20200430-0004/
- https://usn.ubuntu.com/usn/usn-4302-1