CVE-2020-12912
published 2020-11-12CVE-2020-12912: A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL)…
PriorityP425medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.46%
37.7th percentile
A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.9.9-1 (bookworm) | linux 5.9.9-1 (bookworm) |
| github.com | containerd_containerd | >= 0 < 1.6.26 | 1.6.26 |
| github.com | containerd_containerd | >= 1.7.0 < 1.7.11 | 1.7.11 |
| github.com | docker_docker | >= 0 < 20.10.27 | 20.10.27 |
| github.com | docker_docker | >= 21.0.0 < 23.0.8 | 23.0.8 |
| github.com | docker_docker | >= 24.0.0 < 24.0.7 | 24.0.7 |
| linux | linux_kernel | >= 0 < 5.9.9-1 | 5.9.9-1 |
| linux | linux_kernel | >= 0 < 5.9.9-1 | 5.9.9-1 |
| linux | linux_kernel | >= 0 < 5.9.9-1 | 5.9.9-1 |
| linux | linux_kernel | >= 0 < 5.9.9-1 | 5.9.9-1 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
ghsa5.5MEDIUM
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2021-01-06·CVSS 5.5
CVE-2020-12912 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that the AMD Running Average Power Limit (RAPL) driver in
the Linux kernel did not properly restrict access to power data. A local
attacker could possibly use this to expose sensitive information.
(CVE-2020-12912)
Jann Horn discovered that the io_uring subsystem in the Linux kernel did
not properly perform reference counting in some situations. A local
attacker could use this to expose sensitive information or possibly
escalate privileges. (CVE-2020-29534)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, w
Red Hat
kernel: unprivileged access to RAPL allows for side channel attacks
vendor_redhat·2020-11-12·CVSS 5.5
CVE-2020-12912 [MEDIUM] CWE-266 kernel: unprivileged access to RAPL allows for side channel attacks
kernel: unprivileged access to RAPL allows for side channel attacks
A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
A flaw was found in the Linux kernel’s implementation of RAPL for AMD CPUs. This flaw allows a user with a local account to use the RAPL interface to gain information on the CPU execution state, resulting in an information leak of sensitive data across security boundaries. The highest threat from this vulnerability is to confidentiality.
Package: kernel (Red Hat Enterprise Linux 5) - Not affected
Package: kernel (Red Hat Enterp
Debian
CVE-2020-12912: linux - A potential vulnerability in the AMD extension to Linux "hwmon" service may allo...
vendor_debian·2020·CVSS 5.5
CVE-2020-12912 [MEDIUM] CVE-2020-12912: linux - A potential vulnerability in the AMD extension to Linux "hwmon" service may allo...
A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
Scope: local
bookworm: resolved (fixed in 5.9.9-1)
bullseye: resolved (fixed in 5.9.9-1)
forky: resolved (fixed in 5.9.9-1)
sid: resolved (fixed in 5.9.9-1)
trixie: resolved (fixed in 5.9.9-1)
OSV
containerd allows RAPL to be accessible to a container
osv·2023-12-19·CVSS 5.5
[MEDIUM] containerd allows RAPL to be accessible to a container
containerd allows RAPL to be accessible to a container
# /sys/devices/virtual/powercap accessible by default to containers
Intel's RAPL (Running Average Power Limit) feature, introduced by the Sandy Bridge microarchitecture, provides software insights into hardware energy consumption. To facilitate this, Intel introduced the powercap framework in Linux kernel 3.13, which reads values via relevant MSRs (model specific registers) and provides unprivileged userspace access via `sysfs`. As RAPL is an interface to access a hardware feature, it is only available when running on bare metal with the module compiled into the kernel.
By 2019, it was realized that in some cases unprivileged access to RAPL readings could be exploited as a power-based side-channel against security features including
GHSA
containerd allows RAPL to be accessible to a container
ghsa·2023-12-19·CVSS 5.5
[MEDIUM] containerd allows RAPL to be accessible to a container
containerd allows RAPL to be accessible to a container
# /sys/devices/virtual/powercap accessible by default to containers
Intel's RAPL (Running Average Power Limit) feature, introduced by the Sandy Bridge microarchitecture, provides software insights into hardware energy consumption. To facilitate this, Intel introduced the powercap framework in Linux kernel 3.13, which reads values via relevant MSRs (model specific registers) and provides unprivileged userspace access via `sysfs`. As RAPL is an interface to access a hardware feature, it is only available when running on bare metal with the module compiled into the kernel.
By 2019, it was realized that in some cases unprivileged access to RAPL readings could be exploited as a power-based side-channel against security features including
GHSA
/sys/devices/virtual/powercap accessible by default to containers
ghsa·2023-10-30·CVSS 5.5
[MEDIUM] /sys/devices/virtual/powercap accessible by default to containers
/sys/devices/virtual/powercap accessible by default to containers
Intel's RAPL (Running Average Power Limit) feature, introduced by the Sandy Bridge microarchitecture, provides software insights into hardware energy consumption. To facilitate this, Intel introduced the powercap framework in Linux kernel 3.13, which reads values via relevant MSRs (model specific registers) and provides unprivileged userspace access via `sysfs`. As RAPL is an interface to access a hardware feature, it is only available when running on bare metal with the module compiled into the kernel.
By 2019, it was realized that in some cases unprivileged access to RAPL readings could be exploited as a power-based side-channel against security features including AES-NI (potentially inside a SGX enclave) and KASLR (kern
OSV
/sys/devices/virtual/powercap accessible by default to containers
osv·2023-10-30·CVSS 5.5
[MEDIUM] /sys/devices/virtual/powercap accessible by default to containers
/sys/devices/virtual/powercap accessible by default to containers
Intel's RAPL (Running Average Power Limit) feature, introduced by the Sandy Bridge microarchitecture, provides software insights into hardware energy consumption. To facilitate this, Intel introduced the powercap framework in Linux kernel 3.13, which reads values via relevant MSRs (model specific registers) and provides unprivileged userspace access via `sysfs`. As RAPL is an interface to access a hardware feature, it is only available when running on bare metal with the module compiled into the kernel.
By 2019, it was realized that in some cases unprivileged access to RAPL readings could be exploited as a power-based side-channel against security features including AES-NI (potentially inside a SGX enclave) and KASLR (kern
GHSA
GHSA-329v-cj6c-rhmq: A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL
ghsa_unreviewed·2022-05-24
CVE-2020-12912 [MEDIUM] CWE-203 GHSA-329v-cj6c-rhmq: A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL
A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
OSV
linux, linux-hwe-5.8, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oracle, linux-raspi vulnerabilities
osv·2021-01-06·CVSS 5.5
CVE-2020-12912 [MEDIUM] linux, linux-hwe-5.8, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oracle, linux-raspi vulnerabilities
linux, linux-hwe-5.8, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oracle, linux-raspi vulnerabilities
It was discovered that the AMD Running Average Power Limit (RAPL) driver in
the Linux kernel did not properly restrict access to power data. A local
attacker could possibly use this to expose sensitive information.
(CVE-2020-12912)
Jann Horn discovered that the io_uring subsystem in the Linux kernel did
not properly perform reference counting in some situations. A local
attacker could use this to expose sensitive information or possibly
escalate privileges. (CVE-2020-29534)
OSV
CVE-2020-12912: A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL
osv·2020-11-12·CVSS 5.5
CVE-2020-12912 [MEDIUM] CVE-2020-12912: A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL
A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-11-12
Published