CVE-2019-15902

2019-09-0400:00:00

ubuntu.com

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

0.0005 Low

EPSS

Percentile

16.7%

JSON

A backporting error was discovered in the Linux stable/longterm kernel
4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141,
4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream
“x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()” commit
reintroduced the Spectre vulnerability that it aimed to eliminate. This
occurred because the backport process depends on cherry picking specific
commits, and because two (correctly ordered) code lines were swapped.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-66.75UNKNOWN
ubuntu19.04noarchlinux< 5.0.0-32.34UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-166.195UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1052.54UNKNOWN
ubuntu19.04noarchlinux-aws< 5.0.0-1019.21UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1056.60) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1096.107UNKNOWN
ubuntu16.04noarchlinux-aws-hwe< 4.15.0-1052.54~16.04.1UNKNOWN
ubuntu18.04noarchlinux-azure< 5.0.0-1023.24~18.04.1UNKNOWN
ubuntu19.04noarchlinux-azure< 5.0.0-1023.24UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-66.75	UNKNOWN
ubuntu	19.04	noarch	linux	< 5.0.0-32.34	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-166.195	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1052.54	UNKNOWN
ubuntu	19.04	noarch	linux-aws	< 5.0.0-1019.21	UNKNOWN
ubuntu	14.04	noarch	linux-aws	< 4.4.0-1056.60) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	16.04	noarch	linux-aws	< 4.4.0-1096.107	UNKNOWN
ubuntu	16.04	noarch	linux-aws-hwe	< 4.15.0-1052.54~16.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-azure	< 5.0.0-1023.24~18.04.1	UNKNOWN
ubuntu	19.04	noarch	linux-azure	< 5.0.0-1023.24	UNKNOWN