Red Hat respond to ZombieLoad v2 vulnerability affects Intel CPU's

The three new security vulnerabilities CVE-2018-12207 (computer to check for errors on the page size changes), CVE-2019-11135 (asynchronous suspend the TSX) and  CVE-2019-0155-2019-0154 and CVE (i915 graphics driver programs related vulnerabilities). Red Hat security team these important and marked as having moderate security impact, which could allow an attacker to gain read access to the sensitive data, and affects all supported Red Hat Enterprise Linux systems.

"Red Hat realize a micro-architecture (hardware) implementation issues, the issue may allow a local unprivileged attackers to bypass security controls of conventional systems, resulting in a denial of service condition of system-wide. Currently, only know this particular defects affect Intel-based processor core. this defect is hardware-based, need to fix kernel updates. this issue affects all releases Red Hat Enterprise Linux 8 and earlier. "Red Hat said.

Red Hat recommends all users update their systems immediately

Today has released a new version of the Linux kernel, in order to mitigate these new security vulnerability affects Intel CPU, so they should soon be available in your favorite GNU / Linux distributions stable software repository. Red Hat recommends all users update their systems as soon as possible, even if they think there is no direct threat to their configuration as well.

When the updated Linux kernel packages are available for all supported Red Hat Enterprise Linux operating system, we'll publish any further update of Red Hat, and when other Linux OS vendor releases a patch to relieve their support release the Linux kernel packages of these vulnerabilities, so please pay attention as soon as possible for more information.

 

Guess you like

Origin www.linuxidc.com/Linux/2019-11/161357.htm