Strix
26.1K

CVE-2020-8832

MEDIUMCVSS 5.5/10EPSS 0.45%

Last modified

CVE-2020-8832 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.. EPSS estimates a 0.45% chance of exploitation in the next 30 days.

Description

The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.

Metrics

CVSS 3.1
5.5/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
0.45%

36.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CanonicalUbuntu Linux18.04
NetappCloud BackupAll versions
NetappSolidfire \& Hci Management NodeAll versions
NetappSteelstore Cloud Integrated StorageAll versions
NetappAff 8300 FirmwareAll versions
NetappAff 8700 FirmwareAll versions
NetappAff A220 FirmwareAll versions
NetappAff A320 FirmwareAll versions
NetappAff A400 FirmwareAll versions
NetappAff A700s FirmwareAll versions
NetappAff C190 FirmwareAll versions
NetappH300e FirmwareAll versions
NetappH300s FirmwareAll versions
NetappH410c FirmwareAll versions
NetappH410s FirmwareAll versions
NetappH500e FirmwareAll versions
NetappH500s FirmwareAll versions
NetappH610c FirmwareAll versions
NetappH610s FirmwareAll versions
NetappH615c FirmwareAll versions
NetappH700e FirmwareAll versions
NetappH700s FirmwareAll versions
NetappFas2720 FirmwareAll versions
NetappFas2750 FirmwareAll versions
NetappFas8300 FirmwareAll versions
NetappFas8700 FirmwareAll versions
NetappFas Baseboard Management Controller A220 FirmwareAll versions
NetappFas Baseboard Management Controller A320 FirmwareAll versions
NetappFas Baseboard Management Controller A400 FirmwareAll versions
NetappFas Baseboard Management Controller A800 FirmwareAll versions
NetappFas Baseboard Management Controller C190 FirmwareAll versions
NetappSolidfire Baseboard Management Controller FirmwareAll versions
CanonicalUbuntu Linux14.04
CanonicalUbuntu Linux16.04

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2020-8832?
The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.
How severe is CVE-2020-8832?
CVE-2020-8832 has a CVSS score of 5.5/10 (MEDIUM severity). The EPSS model estimates a 0.45% probability of exploitation in the next 30 days.
How do I fix CVE-2020-8832?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-8832?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST