Bug 1897402 (CVE-2020-12912) - CVE-2020-12912 kernel: unprivileged access to RAPL allows for side channel attacks
Summary: CVE-2020-12912 kernel: unprivileged access to RAPL allows for side channel at...
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2020-12912
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1897506
Blocks: 1897295
TreeView+ depends on / blocked
 
Reported: 2020-11-13 01:48 UTC by Wade Mealing
Modified: 2021-02-16 18:55 UTC (History)
45 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in the Linux kernel’s implementation of RAPL for AMD CPUs. This flaw allows a user with a local account to use the RAPL interface to gain information on the CPU execution state, resulting in an information leak of sensitive data across security boundaries. The highest threat from this vulnerability is to confidentiality.
Clone Of:
Environment:
Last Closed: 2020-11-13 11:28:31 UTC
Embargoed:

Attachments (Terms of Use)

Description Wade Mealing 2020-11-13 01:48:35 UTC 
A flaw in the Linux kernels implementation of RAPL for AMD CPUS allowed a user with a local account to use the RAPL interface to infer CPU execution state.  This could allow information leak of sensitive information across security boundaries.
Comment 2 Wade Mealing 2020-11-13 02:28:23 UTC 
External References:

https://support.lenovo.com/lu/uk/product_security/LEN-50481
https://www.amd.com/en/corporate/product-security
https://www.cybersecurity-help.cz/vdb/SB2020111118
Comment 3 Petr Matousek 2020-11-13 09:14:45 UTC 
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 1897506]
Comment 4 Product Security DevOps Team 2020-11-13 11:28:31 UTC 
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2020-12912
Comment 5 Justin M. Forbes 2020-12-03 16:42:41 UTC 
This was fixed for Fedora with the 5.9.9 stable kernel updates.
Note You need to log in before you can comment on or make changes to this bug.