A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4936-1 advisory.

  - A potential vulnerability in the AMD extension to Linux hwmon service may allow an attacker to use the     Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line     with industry partners, AMD has updated the RAPL interface to require privileged access. (CVE-2020-12912)

  - Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-8694)

  - Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2020-8695)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4625-1 advisory.

  - A potential vulnerability in the AMD extension to Linux hwmon service may allow an attacker to use the     Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line     with industry partners, AMD has updated the RAPL interface to require privileged access. (CVE-2020-12912)

  - Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-8694)

  - Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2020-8695)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4678-1 advisory.

    It was discovered that the AMD Running Average Power Limit (RAPL) driver in the Linux kernel did not     properly restrict access to power data. A local attacker could possibly use this to expose sensitive     information. (CVE-2020-12912)

    Jann Horn discovered that the io_uring subsystem in the Linux kernel did not properly perform reference     counting in some situations. A local attacker could use this to expose sensitive information or possibly     escalate privileges. (CVE-2020-29534)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
187143	SUSE SLES15 / openSUSE 15 Security Update : docker, rootlesskit (SUSE-SU-2023:4936-1)	Nessus	SuSE Local Security Checks	medium
186520	SUSE SLES12 Security Update : containerd, docker, runc (SUSE-SU-2023:4625-1)	Nessus	SuSE Local Security Checks	medium
144751	Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4678-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2020-12912

medium

Tenable Plugins

medium

medium

high