CVE-2020-0548 log

Source
Severity Low
Remote No
Type Information disclosure
Description
A flaw was found in Intel processors where a local attacker is able to gain information about registers used for vector calculations by observing register states from other processes running on the system. This results in a race condition where store buffers, which were not cleared, could be read by another process or a CPU sibling. The highest threat from this vulnerability is data confidentiality where an attacker could read arbitrary data as it passes through the processor.
Group Package Affected Fixed Severity Status Ticket
AVG-1187 intel-ucode 20200520-1 20200609-1 High Fixed
Date Advisory Group Package Severity Type
13 Jun 2020 ASA-202006-10 AVG-1187 intel-ucode High information disclosure
References
https://cacheoutattack.com/CacheOut.pdf
https://software.intel.com/security-software-guidance/software-guidance/l1d-eviction-sampling
https://blogs.intel.com/technology/2020/01/ipas-intel-sa-00329/