USN-4096-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 13 Aug 2019, 16:24
Last modified:03 Jun 2026, 13:33

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

13 Aug 2019, 16:24
Published
Vulnerability first disclosed
03 Jun 2026, 13:33
Last Modified
Vulnerability information updated

Description

linux-aws, linux-aws-hwe vulnerability Andrei Vlad Lutas and Dan Lutas discovered that some x86 processors incorrectly handle SWAPGS instructions during speculative execution. A local attacker could use this to expose sensitive information (kernel memory).

Affected Systems

  • ubuntu•linux-aws

    < 4.15.0-1045.47

  • ubuntu•linux-aws-hwe

    < 4.15.0-1045.47~16.04.1

References (2)