Home

CVE-2020-12912

Description

A potential vulnerability in the AMD extension to Linux hwmon service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
1.205

Associated Vulnerability

VulnerabilityOS Platform
Linux kernel (USN-4678-1) linux-image-aws_5.8.0.1017.19_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-gcp_5.8.0.1015.15_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-gke_5.8.0.1015.15_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-kvm_5.8.0.1014.16_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-azure_5.8.0.1016.16_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-oracle_5.8.0.1014.14_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-generic_5.8.0.34.39_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-virtual_5.8.0.34.39_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-lowlatency_5.8.0.34.39_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-5.8.0-1014-kvm_5.8.0-1014.15_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-5.8.0-1015-gcp_5.8.0-1015.15_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-5.8.0-1017-aws_5.8.0-1017.18_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-5.8.0-1016-azure_5.8.0-1016.17_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-5.8.0-34-generic_5.8.0-34.37_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-5.8.0-1014-oracle_5.8.0-1014.14_amd64.debLinux
Linux kernel (USN-4678-1) linux-image-5.8.0-34-lowlatency_5.8.0-34.37_amd64.debLinux
SUSE-SU-2023:4936-1(Containers Module 15-SP4) docker-24.0.7_ce-150000.190.4.x86_64.rpmLinux
SUSE-SU-2023:4936-1(Containers Module 15-SP5) docker-24.0.7_ce-150000.190.4.x86_64_15_SP5.rpmLinux
SUSE-SU-2023:4936-1(Containers Module 15-SP4) rootlesskit-1.1.1-150000.1.3.3.x86_64.rpmLinux
SUSE-SU-2023:4936-1(Containers Module 15-SP5) rootlesskit-1.1.1-150000.1.3.3.x86_64_15_SP5.rpmLinux
SUSE-SU-2023:4936-1(Containers Module 15-SP4) docker-debuginfo-24.0.7_ce-150000.190.4.x86_64.rpmLinux
SUSE-SU-2023:4936-1(Containers Module 15-SP5) docker-debuginfo-24.0.7_ce-150000.190.4.x86_64_15_SP5.rpmLinux
SUSE-SU-2023:4936-1(Containers Module 15-SP4) rootlesskit-debuginfo-1.1.1-150000.1.3.3.x86_64.rpmLinux
SUSE-SU-2023:4936-1(Containers Module 15-SP5) rootlesskit-debuginfo-1.1.1-150000.1.3.3.x86_64_15_SP5.rpmLinux
SUSE-SU-2023:4936-1(Containers Module 15-SP4) docker-bash-completion-24.0.7_ce-150000.190.4.noarch.rpmLinux
SUSE-SU-2023:4936-1(Containers Module 15-SP5) docker-bash-completion-24.0.7_ce-150000.190.4.noarch_15_SP5.rpmLinux
SUSE-SU-2023:4936-1(Containers Module 15-SP4) docker-rootless-extras-24.0.7_ce-150000.190.4.noarch.rpmLinux
SUSE-SU-2023:4936-1(Containers Module 15-SP5) docker-rootless-extras-24.0.7_ce-150000.190.4.noarch_15_SP5.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234