CVE-2020-8832

The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.

Score

CVSS 3.1 5.5 Medium

Status

Modified - security@ubuntu.com

Published

2020-04-10

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Ubuntu Linux (Canonical)
• Aff 8300 Firmware (Netapp)
• Aff 8700 Firmware (Netapp)
• Aff A220 Firmware (Netapp)
• Aff A320 Firmware (Netapp)
• Aff A400 Firmware (Netapp)
• Aff A700s Firmware (Netapp)
• Aff C190 Firmware (Netapp)
• Cloud Backup (Netapp)
• Fas2720 Firmware (Netapp)
• Fas2750 Firmware (Netapp)
• Fas8300 Firmware (Netapp)
• Fas8700 Firmware (Netapp)
• Fas Baseboard Management Controller A220 Firmware (Netapp)
• Fas Baseboard Management Controller A320 Firmware (Netapp)
• Fas Baseboard Management Controller A400 Firmware (Netapp)
• Fas Baseboard Management Controller A800 Firmware (Netapp)
• Fas Baseboard Management Controller C190 Firmware (Netapp)
• H300e Firmware (Netapp)
• H300s Firmware (Netapp)
• H410c Firmware (Netapp)
• H410s Firmware (Netapp)
• H500e Firmware (Netapp)
• H500s Firmware (Netapp)
• H610c Firmware (Netapp)
• H610s Firmware (Netapp)
• H615c Firmware (Netapp)
• H700e Firmware (Netapp)
• H700s Firmware (Netapp)
• Solidfire & Hci Management Node (Netapp)
• Solidfire Baseboard Management Controller Firmware (Netapp)
• Steelstore Cloud Integrated Storage (Netapp)
• 18.04 Lts Bionic Linux Kernel (Ubuntu)

References

• https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1862840
• https://security.netapp.com/advisory/ntap-20200430-0004/
• https://usn.ubuntu.com/usn/usn-4302-1