Intel's Linux graphics drivers for the graphics Gen9 vulnerability patched

In addition to Intel graphics driver from the beginning of November than for denial of service and privilege escalation vulnerability patch, Linux kernel today also received a new patch about "CVE-2019-14615", covering Gen9 graphics hardware possible data leak.

CVE-2019-14615 not been made public, but today (the second Tuesday of the month) submission (63d264fe) merged into the mainline, explains:

For some Intel graphics processors use Intel processors, lack of certain data flow control structure, may result in an unauthenticated user to potentially enable access via a local information disclosure

This provides mitigation measures Gen9 hardware. Please note that due to previously implemented solutions, Gen8 will not be affected.

Mitigation measures involving the use of existing hardware features to force clear each context switch at all EU states

Note that this vulnerability could lead to information disclosure, so the need for local access to the system.

Guess you like

Origin www.linuxidc.com/Linux/2020-01/162026.htm