Alpine/intel-ucode: medium 6.5
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
Action: Upgrade intel-ucode to the fixed version for your line (see fixed_versions).
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 20190918-r0 | - |
Fixed versions
| 20190918-r0 | 20191112-r0 | 20191113-r0 |
Sources
- osv: ALPINE-CVE-2019-11135#Alpine:v3.22/intel-ucode
- https://security.alpinelinux.org/vuln/CVE-2019-11135
published · modified · JSON