CVE-2020-8832
Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615
- State
- Published
- Severity
- 5.5 Medium
- Published
- Apr 9, 2020
- Updated
- Sep 17, 2024
- Reserved
- Feb 10, 2020
Description
The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N | canonical |
Weaknesses
- CWE-200 Information Exposure
Affected Products
| Product | Versions |
|---|---|
18.04 LTS (bionic) Linux kernelUbuntu |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.