UBUNTU-CVE-2019-15031

    Dashboard / Vulnerabilities / UBUNTU-CVE-2019-15031

    UBUNTU-CVE-2019-15031

    Published: 9 Sept 2019Last Modified: 9 Sept 2026
    Upstream:
    CVE-2019-15031

    Summary:

    Details: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.

    References: https://ubuntu.com/security/CVE-2019-15031, https://git.kernel.org/linus/a8318c13e79badb92bc6640704a64cc022a6eb97, https://ubuntu.com/security/notices/USN-4135-1, https://ubuntu.com/security/notices/USN-4135-2, https://www.cve.org/CVERecord?id=CVE-2019-15031

    Affected packages

    Package

    Name: linux-azure

    Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=trusty%2Fesm

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.15.0-1059.64~14.04.1

    Affected versions

    4.15.0-1023.24~14.04.1
    4.15.0-1030.31~14.04.1
    4.15.0-1031.32~14.04.1
    4.15.0-1032.33~14.04.2
    4.15.0-1035.36~14.04.2
    4.15.0-1036.38~14.04.2
    4.15.0-1037.39~14.04.2
    4.15.0-1039.41~14.04.2
    4.15.0-1040.44~14.04.1
    4.15.0-1041.45~14.04.1
    4.15.0-1042.46~14.04.1
    4.15.0-1045.49~14.04.1
    4.15.0-1046.50~14.04.1
    4.15.0-1047.51~14.04.1
    4.15.0-1049.54~14.04.1
    4.15.0-1050.55~14.04.1
    4.15.0-1051.56~14.04.1
    4.15.0-1052.57~14.04.1
    4.15.0-1055.60~14.04.1
    4.15.0-1056.61~14.04.1
    4.15.0-1057.62~14.04.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High