CVE-2020-8832CWE-200

Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615

Medium · published April 9, 2020

CVSS v3.1
5.5
EPSS
0%
Percentile
38.2
In the wild
Unconfirmed
What it is

The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00452 · 38.2th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2020-04-09T23:50Z
EPSS history
Timeline
  • 09 APR 23:50Z
    Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615
    cvelistv5