CVE Feed

    Dashboard / CVE / CVE-2019-15030

    CVE-2019-15030

    In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.

    Published:Sep 6, 2019
    Last Modified:Nov 21, 2024
    EPS:Sep 13, 2019
    EPSS Score:0.00081
    CVSS Score:4.4

    Affected Products

    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Opensuse
    Product
    Leap
    Vendor
    Redhat
    Product
    Enterprise Linux

    Common Attack Pattern Enumeration and Classification (CAPEC)

    Related CVEs

    References

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High