A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality.

🗓️ 25 Sep 2020 07:00:00Reported by MicrosoftType

A logic bug in the Linux kernel before five point eight rc1 lets local attackers disable Speculative Store Bypass Disable during context switches with mitigations.

Reporter	Title	Published	Views	Family All 327
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System	25 May 202223:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in jQuery, Spring, Dom4j, MongoDB, Linux Kernel, Targetcli-fb, Jackson, Node.js, and Apache Commons affect IBM Spectrum Protect Plus	20 Nov 202020:41	–	ibm
ATTACKERKB	CVE-2018-3639	22 May 201800:00	–	attackerkb
Tenable Nessus	Amazon Linux 2 : kernel (ALAS-2020-1465)	23 Jul 202000:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-013)	2 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : kernel (ALAS-2020-1401)	20 Jul 202000:00	–	nessus
Tenable Nessus	Debian DLA-2323-1 : linux-4.19 new package	13 Aug 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1807)	30 Jul 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : kernel (EulerOS-SA-2020-1892)	28 Aug 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2020-1958)	8 Sep 202000:00	–	nessus