CVE-2020-12912: Medium severity AMD Energy Driver For Linux vulnerability
Published Nov 12, 2020
·Updated
A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
Affected Software
1 affected component
AMD Energy Driver For Linux
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Restrict the Linux-based Running Average Power Limit (RAPL) interface to privileged access.
Linux hwmon service AMD RAPL interface RAPL interface access = privileged access required
Event History
Nov 10, 2020
News Published
via ZDNet·06:00 PM
Nov 12, 2020
CVE Published
via MITRE·07:08 PM
Data Sourced
via MITRE·07:08 PM
DescriptionWeakness