CVE-2019-1125: Infoleak
First published: Thu Jun 27 2019(Updated: )
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071, CVE-2019-1073.
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <0:2.6.32-754.18.2.el6 | 0:2.6.32-754.18.2.el6 |
| redhat/kernel | <0:2.6.32-431.96.1.el6 | 0:2.6.32-431.96.1.el6 |
| redhat/kernel | <0:2.6.32-504.80.2.el6 | 0:2.6.32-504.80.2.el6 |
| redhat/kernel-rt | <0:3.10.0-1062.1.1.rt56.1024.el7 | 0:3.10.0-1062.1.1.rt56.1024.el7 |
| redhat/kernel | <0:3.10.0-1062.1.1.el7 | 0:3.10.0-1062.1.1.el7 |
| redhat/kernel | <0:3.10.0-327.82.1.el7 | 0:3.10.0-327.82.1.el7 |
| redhat/kernel | <0:3.10.0-514.69.1.el7 | 0:3.10.0-514.69.1.el7 |
| redhat/kernel | <0:3.10.0-693.58.1.el7 | 0:3.10.0-693.58.1.el7 |
| redhat/kernel | <0:3.10.0-862.43.1.el7 | 0:3.10.0-862.43.1.el7 |
| redhat/kernel | <0:3.10.0-957.38.1.el7 | 0:3.10.0-957.38.1.el7 |
| redhat/kernel-rt | <0:4.18.0-80.7.2.rt9.154.el8_0 | 0:4.18.0-80.7.2.rt9.154.el8_0 |
| redhat/kernel | <0:4.18.0-80.7.2.el8_0 | 0:4.18.0-80.7.2.el8_0 |
| redhat/kernel-rt | <1:3.10.0-693.58.1.rt56.652.el6 | 1:3.10.0-693.58.1.rt56.652.el6 |
| redhat/redhat-release-virtualization-host | <0:4.2-15.1.el7 | 0:4.2-15.1.el7 |
| redhat/redhat-virtualization-host | <0:4.2-20191022.0.el7_6 | 0:4.2-20191022.0.el7_6 |
| redhat/imgbased | <0:1.1.10-0.1.el7e | 0:1.1.10-0.1.el7e |
| redhat/ovirt-node-ng | <0:4.3.6-0.20190820.0.el7e | 0:4.3.6-0.20190820.0.el7e |
| redhat/redhat-release-virtualization-host | <0:4.3.6-2.el7e | 0:4.3.6-2.el7e |
| redhat/redhat-virtualization-host | <0:4.3.6-20190924.0.el7_7 | 0:4.3.6-20190924.0.el7_7 |
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows 10 | =1803 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1903 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows 8.1 | ||
| Microsoft Windows RT 8.1 | ||
| Microsoft Windows Server 2008 | =sp2 | |
| Microsoft Windows Server 2008 | =r2-sp1 | |
| Microsoft Windows Server 2008 | =r2-sp1 | |
| Microsoft Windows Server 2012 | ||
| Microsoft Windows Server 2012 | =r2 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | =1803 | |
| Microsoft Windows Server 2016 | =1903 | |
| Microsoft Windows Server 2019 | ||
| Redhat Virtualization Host | =4.0 | |
| Redhat Enterprise Linux Desktop | =7.0 | |
| Redhat Enterprise Linux Server | =7.0 | |
| Redhat Enterprise Linux Server Aus | =7.7 | |
| Redhat Enterprise Linux Server Eus | =7.7 | |
| Redhat Enterprise Linux Server Tus | =7.7 | |
| Redhat Enterprise Linux Workstation | =7.0 | |
| ubuntu/linux | <4.15.0-58.64 | 4.15.0-58.64 |
| ubuntu/linux | <5.0.0-25.26 | 5.0.0-25.26 |
| ubuntu/linux | <5.3~ | 5.3~ |
| ubuntu/linux | <4.4.0-159.187 | 4.4.0-159.187 |
| ubuntu/linux-aws | <4.15.0-1045.47 | 4.15.0-1045.47 |
| ubuntu/linux-aws | <5.0.0-1012.13 | 5.0.0-1012.13 |
| ubuntu/linux-aws | <4.4.0-1054.58 | 4.4.0-1054.58 |
| ubuntu/linux-aws | <5.3~ | 5.3~ |
| ubuntu/linux-aws | <4.4.0-1090.101 | 4.4.0-1090.101 |
| ubuntu/linux-aws-5.0 | <5.3~ | 5.3~ |
| ubuntu/linux-aws-hwe | <5.3~ | 5.3~ |
| ubuntu/linux-aws-hwe | <4.15.0-1045.47~16.04.1 | 4.15.0-1045.47~16.04.1 |
| ubuntu/linux-azure | <5.0.0-1014.14~18.04.1 | 5.0.0-1014.14~18.04.1 |
| ubuntu/linux-azure | <5.0.0-1014.14 | 5.0.0-1014.14 |
| ubuntu/linux-azure | <4.15.0-1059.64~14.04.1 | 4.15.0-1059.64~14.04.1 |
| ubuntu/linux-azure | <5.3~ | 5.3~ |
| ubuntu/linux-azure | <4.15.0-1055.60 | 4.15.0-1055.60 |
| ubuntu/linux-azure-5.3 | <5.3~ | 5.3~ |
| ubuntu/linux-azure-edge | <5.0.0-1014.14~18.04.1 | 5.0.0-1014.14~18.04.1 |
| ubuntu/linux-azure-edge | <5.3~ | 5.3~ |
| ubuntu/linux-azure-edge | <4.15.0-1055.60 | 4.15.0-1055.60 |
| ubuntu/linux-gcp | <4.15.0-1040.42 | 4.15.0-1040.42 |
| ubuntu/linux-gcp | <5.0.0-1013.13 | 5.0.0-1013.13 |
| ubuntu/linux-gcp | <5.3~ | 5.3~ |
| ubuntu/linux-gcp | <4.15.0-1040.42~16.04.1 | 4.15.0-1040.42~16.04.1 |
| ubuntu/linux-gcp-5.3 | <5.3~ | 5.3~ |
| ubuntu/linux-gcp-edge | <4.15.0-1040.42 | 4.15.0-1040.42 |
| ubuntu/linux-gcp-edge | <5.3~ | 5.3~ |
| ubuntu/linux-gke-4.15 | <4.15.0-1040.42 | 4.15.0-1040.42 |
| ubuntu/linux-gke-4.15 | <5.3~ | 5.3~ |
| ubuntu/linux-gke-5.0 | <5.0.0-1013.13~18.04.1 | 5.0.0-1013.13~18.04.1 |
| ubuntu/linux-gke-5.0 | <5.3~ | 5.3~ |
| ubuntu/linux-hwe | <5.0.0-25.26~18.04.1 | 5.0.0-25.26~18.04.1 |
| ubuntu/linux-hwe | <5.3~ | 5.3~ |
| ubuntu/linux-hwe | <4.15.0-58.64~16.04.1 | 4.15.0-58.64~16.04.1 |
| ubuntu/linux-hwe-edge | <5.3~ | 5.3~ |
| ubuntu/linux-hwe-edge | <4.15.0-58.64~16.04.1 | 4.15.0-58.64~16.04.1 |
| ubuntu/linux-kvm | <4.15.0-1042.42 | 4.15.0-1042.42 |
| ubuntu/linux-kvm | <5.0.0-1013.14 | 5.0.0-1013.14 |
| ubuntu/linux-kvm | <5.3~ | 5.3~ |
| ubuntu/linux-kvm | <4.4.0-1054.61 | 4.4.0-1054.61 |
| ubuntu/linux-lts-trusty | <5.3~ | 5.3~ |
| ubuntu/linux-lts-xenial | <4.4.0-164.192~14.04.1 | 4.4.0-164.192~14.04.1 |
| ubuntu/linux-lts-xenial | <5.3~ | 5.3~ |
| ubuntu/linux-oem | <4.15.0-1050.57 | 4.15.0-1050.57 |
| ubuntu/linux-oem | <4.15.0-1050.57 | 4.15.0-1050.57 |
| ubuntu/linux-oem | <4.15.0-1050.57 | 4.15.0-1050.57 |
| ubuntu/linux-oem | <5.3~ | 5.3~ |
| ubuntu/linux-oem-5.4 | <5.3~ | 5.3~ |
| ubuntu/linux-oem-osp1 | <5.0.0-1018.20 | 5.0.0-1018.20 |
| ubuntu/linux-oem-osp1 | <5.0.0-1018.20 | 5.0.0-1018.20 |
| ubuntu/linux-oem-osp1 | <5.3~ | 5.3~ |
| ubuntu/linux-oracle | <4.15.0-1021.23 | 4.15.0-1021.23 |
| ubuntu/linux-oracle | <5.0.0-1004.8 | 5.0.0-1004.8 |
| ubuntu/linux-oracle | <5.3~ | 5.3~ |
| ubuntu/linux-oracle | <4.15.0-1021.23~16.04.1 | 4.15.0-1021.23~16.04.1 |
| ubuntu/linux-oracle-5.0 | <5.3~ | 5.3~ |
| ubuntu/linux-raspi2 | <5.3~ | 5.3~ |
| ubuntu/linux-raspi2-5.3 | <5.3~ | 5.3~ |
| ubuntu/linux-snapdragon | <5.3~ | 5.3~ |
| debian/linux | 4.19.249-2 4.19.304-1 5.10.209-2 5.10.205-2 6.1.76-1 6.1.85-1 6.6.15-2 6.7.12-1 |
Remedy
For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/articles/4329821
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.cve.org/CVERecord?id=CVE-2019-1125 https://nvd.nist.gov/vuln/detail/CVE-2019-1125
- https://bugzilla.redhat.com/show_bug.cgi?id=1724389
- https://access.redhat.com/errata/RHSA-2019:2473
- https://access.redhat.com/errata/RHSA-2019:2695
- https://access.redhat.com/errata/RHSA-2019:2476
- https://access.redhat.com/errata/RHSA-2019:2609
- https://access.redhat.com/errata/RHSA-2019:2600
- https://access.redhat.com/errata/RHSA-2019:2899
- https://access.redhat.com/errata/RHSA-2019:2900
- https://access.redhat.com/errata/RHSA-2019:2696
- https://access.redhat.com/errata/RHSA-2019:2975
- https://access.redhat.com/errata/RHSA-2019:3220
- https://access.redhat.com/errata/RHSA-2019:2405
- https://access.redhat.com/errata/RHSA-2019:2411
- https://access.redhat.com/errata/RHSA-2019:2730
- https://access.redhat.com/errata/RHBA-2019:3248
- https://access.redhat.com/errata/RHSA-2019:3011
- https://access.redhat.com/security/cve/cve-2019-1125
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1125
- https://kc.mcafee.com/corporate/index?page=content&id=SB10297
- https://access.redhat.com/errata/RHBA-2019:2824
- https://www.synology.com/security/advisory/Synology_SA_19_32
- http://packetstormsecurity.com/files/156337/SWAPGS-Attack-Proof-Of-Concept.html
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-swapgs-en
- https://launchpad.net/bugs/cve/CVE-2019-1125
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a2059825986a1c8143fd6698774fa9d83733bb11
- https://access.redhat.com/articles/4329821
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1738285
- https://businessresources.bitdefender.com/speculatively-executing-segmentation-related-instructions-intel-cpus?utm_campaign=swapgs&utm_source=web
- https://software.intel.com/security-software-guidance/insights/more-information-swapgs-and-speculative-only-segment-loads
- https://kc.mcafee.com/corporate/index?page=content&id=SB10297
- https://security-tracker.debian.org/tracker/CVE-2019-1125
- https://www.bitdefender.com/business/swapgs-attack.html
- https://ubuntu.com/security/notices/USN-4093-1
- https://ubuntu.com/security/notices/USN-4094-1
- https://ubuntu.com/security/notices/USN-4095-1
- https://ubuntu.com/security/notices/USN-4095-2
- https://ubuntu.com/security/notices/USN-4096-1
- https://www.cve.org/CVERecord?id=CVE-2019-1125
- https://nvd.nist.gov/vuln/detail/CVE-2019-1125
- https://git.kernel.org/linus/1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
- https://git.kernel.org/linus/18ec54fdd6d18d92025af097cd042a75cf0ea24c
- https://git.kernel.org/linus/a2059825986a1c8143fd6698774fa9d83733bb11
- https://ubuntu.com/security/CVE-2019-1125
Parent vulnerabilities
(Appears in the following advisories)
- collector/redhat-cve
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-1125
- agent/author
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/remedy
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/event
- collector/usn-cve
- source/Ubuntu
- collector/security-tracker-debian
- source/Debian
- agent/references
- agent/softwarecombine
- agent/tags
- package-manager/redhat
- vendor/microsoft
- canonical/microsoft windows 10
- version/microsoft windows 10/1607
- version/microsoft windows 10/1703
- version/microsoft windows 10/1709
- version/microsoft windows 10/1803
- version/microsoft windows 10/1809
- version/microsoft windows 10/1903
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows 8.1
- canonical/microsoft windows rt 8.1
- canonical/microsoft windows server 2008
- version/microsoft windows server 2008/sp2
- version/microsoft windows server 2008/r2-sp1
- canonical/microsoft windows server 2012
- version/microsoft windows server 2012/r2
- canonical/microsoft windows server 2016
- version/microsoft windows server 2016/1803
- version/microsoft windows server 2016/1903
- canonical/microsoft windows server 2019
- vendor/redhat
- canonical/redhat virtualization host
- version/redhat virtualization host/4.0
- canonical/redhat enterprise linux desktop
- version/redhat enterprise linux desktop/7.0
- canonical/redhat enterprise linux server
- version/redhat enterprise linux server/7.0
- canonical/redhat enterprise linux server aus
- version/redhat enterprise linux server aus/7.7
- canonical/redhat enterprise linux server eus
- version/redhat enterprise linux server eus/7.7
- canonical/redhat enterprise linux server tus
- version/redhat enterprise linux server tus/7.7
- canonical/redhat enterprise linux workstation
- version/redhat enterprise linux workstation/7.0
- package-manager/ubuntu
- package-manager/debian