CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NCVE-2019-14615
Medium (5.5). EPSS 1.5% chance of exploitation in the next 30 days.
Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access.
Severity
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- intel:atom_e3805
- intel:atom_e3805_firmware
- intel:atom_e3815
- intel:atom_e3815_firmware
- intel:atom_e3825
- intel:atom_e3825_firmware
- intel:atom_e3826
- intel:atom_e3826_firmware
- intel:atom_e3827
- intel:atom_e3827_firmware
- intel:atom_e3845
- intel:atom_e3845_firmware
- intel:atom_e620
- intel:atom_e620_firmware
- intel:atom_e620t
- intel:atom_e620t_firmware
- intel:atom_e640
- intel:atom_e640_firmware
- intel:atom_e640t
- intel:atom_e640t_firmware
- intel:atom_e660
- intel:atom_e660_firmware
- intel:atom_e660t
- intel:atom_e660t_firmware
- intel:atom_e680
- intel:atom_e680_firmware
- intel:atom_e680t
- intel:atom_e680t_firmware
- intel:atom_x3-c3130
- intel:atom_x3-c3130_firmware
- intel:atom_x3-c3200rk
- intel:atom_x3-c3200rk_firmware
- intel:atom_x3-c3230rk
- intel:atom_x3-c3230rk_firmware
- intel:atom_x3-c3405
- intel:atom_x3-c3405_firmware
- intel:atom_x3-c3445
- intel:atom_x3-c3445_firmware
- intel:atom_x5-z8300
- intel:atom_x5-z8300_firmware
- intel:atom_x5-z8330
- intel:atom_x5-z8330_firmware
- intel:atom_x5-z8500
- intel:atom_x5-z8500_firmware
- intel:atom_x7-z8700
- intel:atom_x7-z8700_firmware
- intel:atom_z2420
- intel:atom_z2420_firmware
- intel:atom_z2460
References
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
- http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html
- http://packetstormsecurity.com/files/156455/Kernel-Live-Patch-Security-Notice-LSN-0063-1.html
- http://seclists.org/fulldisclosure/2020/Mar/31
- https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html