CVE-2019-15902
Medium
Description
A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.
SeverityMedium
CVSS5.6
Exploit probability—
Product
Linux Kernel
PublishedSep 4, 2019
First seenSep 4, 2019
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 4.4 ≤ v ≤ 4.4.190, 4.9 ≤ v ≤ 4.9.190, 4.14 ≤ v ≤ 4.14.141, 4.19 ≤ v ≤ 4.19.69, 5.2 ≤ v ≤ 5.2.11 | — |
| netapp active_iq_performance_analytics_services | No range specified | — |
| netapp service_processor | No range specified | — |
| debian debian_linux | 8.0, 9.0, 10.0 | — |
| opensuse leap | 15.0, 15.1 | — |
| netapp baseboard_management_controller_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.