CVE-2020-12912 - A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use

CVE-2020-12912

Summary

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.

References

https://www.amd.com/en/corporate/product-security
https://www.amd.com/en/corporate/product-security

Vulnerable Configurations

cpe:2.3:a:amd:energy_driver_for_linux:*:*:*:*:*:*:*:*
cpe:2.3:a:amd:energy_driver_for_linux:*:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 21-11-2024 - 05:00)
Impact:
Exploitability:

CWE

CWE-203

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:N

refmap via4

misc

https://www.amd.com/en/corporate/product-security

Last major update

21-11-2024 - 05:00

Published

12-11-2020 - 20:15

Last modified

21-11-2024 - 05:00