hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)
Published May 30, 2019
5.6
MEDIUMCVSS 3.1
EPSS 0.61%
Description
Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
Affected products
-
- Version A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdfStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Intel Corporation | Central Processing Units (CPUs) | n/a |
|
Configuration 1
Running on/with
- n/a
Configuration 2
- 29
No data.
Red Hat Enterprise Linux 6
kernel-0:2.6.32-754.14.2.el6
Fixed · RHSA-2019:1169
Red Hat Enterprise Linux 6
libvirt-0:0.10.2-64.el6_10.1
Fixed · RHSA-2019:1180
Red Hat Enterprise Linux 6
qemu-kvm-2:0.12.1.2-2.506.el6_10.3
Fixed · RHSA-2019:1181
Red Hat Enterprise Linux 6.5 Advanced Update Support
kernel-0:2.6.32-431.94.2.el6
Fixed · RHSA-2019:1196
Red Hat Enterprise Linux 6.5 Advanced Update Support
libvirt-0:0.10.2-29.el6_5.18
Fixed · RHSA-2019:1197
Red Hat Enterprise Linux 6.5 Advanced Update Support
qemu-kvm-2:0.12.1.2-2.415.el6_5.20
Fixed · RHSA-2019:1198
Red Hat Enterprise Linux 6.6 Advanced Update Support
kernel-0:2.6.32-504.78.2.el6
Fixed · RHSA-2019:1193
Red Hat Enterprise Linux 6.6 Advanced Update Support
libvirt-0:0.10.2-46.el6_6.10
Fixed · RHSA-2019:1194
Red Hat Enterprise Linux 6.6 Advanced Update Support
qemu-kvm-2:0.12.1.2-2.448.el6_6.8
Fixed · RHSA-2019:1195
Red Hat Enterprise Linux 7
kernel-0:3.10.0-957.12.2.el7
Fixed · RHSA-2019:1168
Red Hat Enterprise Linux 7
kernel-rt-0:3.10.0-957.12.2.rt56.929.el7
Fixed · RHSA-2019:1176
Red Hat Enterprise Linux 7
libvirt-0:4.5.0-10.el7_6.9
Fixed · RHSA-2019:1177
Red Hat Enterprise Linux 7
qemu-kvm-10:1.5.3-160.el7_6.2
Fixed · RHSA-2019:1178
Red Hat Enterprise Linux 7.2 Advanced Update Support
kernel-0:3.10.0-327.78.2.el7
Fixed · RHSA-2019:1172
Red Hat Enterprise Linux 7.2 Advanced Update Support
libvirt-0:1.2.17-13.el7_2.10
Fixed · RHSA-2019:1186
Red Hat Enterprise Linux 7.2 Advanced Update Support
qemu-kvm-10:1.5.3-105.el7_2.19
Fixed · RHSA-2019:1188
Red Hat Enterprise Linux 7.2 Telco Extended Update Support
kernel-0:3.10.0-327.78.2.el7
Fixed · RHSA-2019:1172
Red Hat Enterprise Linux 7.2 Telco Extended Update Support
libvirt-0:1.2.17-13.el7_2.10
Fixed · RHSA-2019:1186
Red Hat Enterprise Linux 7.2 Telco Extended Update Support
qemu-kvm-10:1.5.3-105.el7_2.19
Fixed · RHSA-2019:1188
Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions
kernel-0:3.10.0-327.78.2.el7
Fixed · RHSA-2019:1172
Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions
libvirt-0:1.2.17-13.el7_2.10
Fixed · RHSA-2019:1186
Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions
qemu-kvm-10:1.5.3-105.el7_2.19
Fixed · RHSA-2019:1188
Red Hat Enterprise Linux 7.3 Advanced Update Support
kernel-0:3.10.0-514.64.2.el7
Fixed · RHSA-2019:1171
Red Hat Enterprise Linux 7.3 Advanced Update Support
libvirt-0:2.0.0-10.el7_3.14
Fixed · RHSA-2019:1187
Red Hat Enterprise Linux 7.3 Advanced Update Support
qemu-kvm-10:1.5.3-126.el7_3.17
Fixed · RHSA-2019:1189
Red Hat Enterprise Linux 7.3 Telco Extended Update Support
kernel-0:3.10.0-514.64.2.el7
Fixed · RHSA-2019:1171
Red Hat Enterprise Linux 7.3 Telco Extended Update Support
libvirt-0:2.0.0-10.el7_3.14
Fixed · RHSA-2019:1187
Red Hat Enterprise Linux 7.3 Telco Extended Update Support
qemu-kvm-10:1.5.3-126.el7_3.17
Fixed · RHSA-2019:1189
Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions
kernel-0:3.10.0-514.64.2.el7
Fixed · RHSA-2019:1171
Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions
libvirt-0:2.0.0-10.el7_3.14
Fixed · RHSA-2019:1187
Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions
qemu-kvm-10:1.5.3-126.el7_3.17
Fixed · RHSA-2019:1189
Red Hat Enterprise Linux 7.4 Extended Update Support
kernel-0:3.10.0-693.47.2.el7
Fixed · RHSA-2019:1170
Red Hat Enterprise Linux 7.4 Extended Update Support
libvirt-0:3.2.0-14.el7_4.13
Fixed · RHSA-2019:1184
Red Hat Enterprise Linux 7.4 Extended Update Support
qemu-kvm-10:1.5.3-141.el7_4.10
Fixed · RHSA-2019:1185
Red Hat Enterprise Linux 7.5 Extended Update Support
kernel-0:3.10.0-862.32.2.el7
Fixed · RHSA-2019:1155
Red Hat Enterprise Linux 7.5 Extended Update Support
libvirt-0:3.9.0-14.el7_5.9
Fixed · RHSA-2019:1182
Red Hat Enterprise Linux 7.5 Extended Update Support
qemu-kvm-10:1.5.3-156.el7_5.7
Fixed · RHSA-2019:1183
Red Hat Enterprise Linux 8
kernel-0:4.18.0-80.1.2.el8_0
Fixed · RHSA-2019:1167
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0
Fixed · RHSA-2019:1174
Red Hat Enterprise Linux 8
virt:rhel-8000020190510171727.55190bc5
Fixed · RHSA-2019:1175
Red Hat Enterprise Linux 8 Advanced Virtualization
virt:8.0.0-8000020190530233731.55190bc5
Fixed · RHSA-2019:1455
Red Hat Enterprise MRG 2
kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt
Fixed · RHSA-2019:1190
Red Hat OpenStack Platform 10.0 (Newton)
qemu-kvm-rhev-10:2.12.0-18.el7_6.5
Fixed · RHSA-2019:1200
Red Hat OpenStack Platform 13.0 (Queens)
qemu-kvm-rhev-10:2.12.0-18.el7_6.5
Fixed · RHSA-2019:1201
Red Hat OpenStack Platform 14.0 (Rocky)
qemu-kvm-rhev-10:2.12.0-18.el7_6.5
Fixed · RHSA-2019:1202
Red Hat OpenStack Platform 9.0 (Mitaka)
qemu-kvm-rhev-10:2.12.0-18.el7_6.5
Fixed · RHSA-2019:1199
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7
qemu-kvm-rhev-10:2.12.0-18.el7_6.5
Fixed · RHSA-2019:1179
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7
qemu-kvm-rhev-10:2.12.0-33.el7
Fixed · RHSA-2019:2553
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7
redhat-release-virtualization-host-0:4.3-0.7.el7
Fixed · RHSA-2019:1207
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7
redhat-virtualization-host-0:4.3-20190512.0.el7_6
Fixed · RHSA-2019:1207
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7
rhvm-appliance-0:4.3-20190506.0.el7
Fixed · RHSA-2019:1208
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7
vdsm-0:4.30.13-4.el7ev
Fixed · RHSA-2019:1203
Red Hat Virtualization 4.2 for Red Hat Enterprise Linux 7.6 EUS
redhat-release-virtualization-host-0:4.2-8.6.el7
Fixed · RHSA-2019:1209
Red Hat Virtualization 4.2 for Red Hat Enterprise Linux 7.6 EUS
redhat-virtualization-host-0:4.2-20190512.0.el7_6
Fixed · RHSA-2019:1209
Red Hat Virtualization 4.2 for Red Hat Enterprise Linux 7.6 EUS
vdsm-0:4.20.49-1.el7ev
Fixed · RHSA-2019:1204
Red Hat Virtualization Engine 4.2
rhvm-setup-plugins-0:4.2.14-1.el7ev
Fixed · RHSA-2019:1206
Red Hat Virtualization Engine 4.3
qemu-kvm-rhev-10:2.12.0-33.el7
Fixed · RHSA-2019:2553
Red Hat Virtualization Engine 4.3
rhvm-setup-plugins-0:4.3.1-1.el7ev
Fixed · RHSA-2019:1205
Red Hat Enterprise Linux 5
kernel
Will not fix
Red Hat Enterprise Linux 7
kernel-alt
Not affected
Red Hat Virtualization 4
ovirt-guest-agent
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel-0:2.6.32-754.14.2.el6 | Fixed | RHSA-2019:1169 |
| Red Hat Enterprise Linux 6 | libvirt-0:0.10.2-64.el6_10.1 | Fixed | RHSA-2019:1180 |
| Red Hat Enterprise Linux 6 | qemu-kvm-2:0.12.1.2-2.506.el6_10.3 | Fixed | RHSA-2019:1181 |
| Red Hat Enterprise Linux 6.5 Advanced Update Support | kernel-0:2.6.32-431.94.2.el6 | Fixed | RHSA-2019:1196 |
| Red Hat Enterprise Linux 6.5 Advanced Update Support | libvirt-0:0.10.2-29.el6_5.18 | Fixed | RHSA-2019:1197 |
| Red Hat Enterprise Linux 6.5 Advanced Update Support | qemu-kvm-2:0.12.1.2-2.415.el6_5.20 | Fixed | RHSA-2019:1198 |
| Red Hat Enterprise Linux 6.6 Advanced Update Support | kernel-0:2.6.32-504.78.2.el6 | Fixed | RHSA-2019:1193 |
| Red Hat Enterprise Linux 6.6 Advanced Update Support | libvirt-0:0.10.2-46.el6_6.10 | Fixed | RHSA-2019:1194 |
| Red Hat Enterprise Linux 6.6 Advanced Update Support | qemu-kvm-2:0.12.1.2-2.448.el6_6.8 | Fixed | RHSA-2019:1195 |
| Red Hat Enterprise Linux 7 | kernel-0:3.10.0-957.12.2.el7 | Fixed | RHSA-2019:1168 |
| Red Hat Enterprise Linux 7 | kernel-rt-0:3.10.0-957.12.2.rt56.929.el7 | Fixed | RHSA-2019:1176 |
| Red Hat Enterprise Linux 7 | libvirt-0:4.5.0-10.el7_6.9 | Fixed | RHSA-2019:1177 |
| Red Hat Enterprise Linux 7 | qemu-kvm-10:1.5.3-160.el7_6.2 | Fixed | RHSA-2019:1178 |
| Red Hat Enterprise Linux 7.2 Advanced Update Support | kernel-0:3.10.0-327.78.2.el7 | Fixed | RHSA-2019:1172 |
| Red Hat Enterprise Linux 7.2 Advanced Update Support | libvirt-0:1.2.17-13.el7_2.10 | Fixed | RHSA-2019:1186 |
| Red Hat Enterprise Linux 7.2 Advanced Update Support | qemu-kvm-10:1.5.3-105.el7_2.19 | Fixed | RHSA-2019:1188 |
| Red Hat Enterprise Linux 7.2 Telco Extended Update Support | kernel-0:3.10.0-327.78.2.el7 | Fixed | RHSA-2019:1172 |
| Red Hat Enterprise Linux 7.2 Telco Extended Update Support | libvirt-0:1.2.17-13.el7_2.10 | Fixed | RHSA-2019:1186 |
| Red Hat Enterprise Linux 7.2 Telco Extended Update Support | qemu-kvm-10:1.5.3-105.el7_2.19 | Fixed | RHSA-2019:1188 |
| Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions | kernel-0:3.10.0-327.78.2.el7 | Fixed | RHSA-2019:1172 |
| Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions | libvirt-0:1.2.17-13.el7_2.10 | Fixed | RHSA-2019:1186 |
| Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions | qemu-kvm-10:1.5.3-105.el7_2.19 | Fixed | RHSA-2019:1188 |
| Red Hat Enterprise Linux 7.3 Advanced Update Support | kernel-0:3.10.0-514.64.2.el7 | Fixed | RHSA-2019:1171 |
| Red Hat Enterprise Linux 7.3 Advanced Update Support | libvirt-0:2.0.0-10.el7_3.14 | Fixed | RHSA-2019:1187 |
| Red Hat Enterprise Linux 7.3 Advanced Update Support | qemu-kvm-10:1.5.3-126.el7_3.17 | Fixed | RHSA-2019:1189 |
| Red Hat Enterprise Linux 7.3 Telco Extended Update Support | kernel-0:3.10.0-514.64.2.el7 | Fixed | RHSA-2019:1171 |
| Red Hat Enterprise Linux 7.3 Telco Extended Update Support | libvirt-0:2.0.0-10.el7_3.14 | Fixed | RHSA-2019:1187 |
| Red Hat Enterprise Linux 7.3 Telco Extended Update Support | qemu-kvm-10:1.5.3-126.el7_3.17 | Fixed | RHSA-2019:1189 |
| Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions | kernel-0:3.10.0-514.64.2.el7 | Fixed | RHSA-2019:1171 |
| Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions | libvirt-0:2.0.0-10.el7_3.14 | Fixed | RHSA-2019:1187 |
| Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions | qemu-kvm-10:1.5.3-126.el7_3.17 | Fixed | RHSA-2019:1189 |
| Red Hat Enterprise Linux 7.4 Extended Update Support | kernel-0:3.10.0-693.47.2.el7 | Fixed | RHSA-2019:1170 |
| Red Hat Enterprise Linux 7.4 Extended Update Support | libvirt-0:3.2.0-14.el7_4.13 | Fixed | RHSA-2019:1184 |
| Red Hat Enterprise Linux 7.4 Extended Update Support | qemu-kvm-10:1.5.3-141.el7_4.10 | Fixed | RHSA-2019:1185 |
| Red Hat Enterprise Linux 7.5 Extended Update Support | kernel-0:3.10.0-862.32.2.el7 | Fixed | RHSA-2019:1155 |
| Red Hat Enterprise Linux 7.5 Extended Update Support | libvirt-0:3.9.0-14.el7_5.9 | Fixed | RHSA-2019:1182 |
| Red Hat Enterprise Linux 7.5 Extended Update Support | qemu-kvm-10:1.5.3-156.el7_5.7 | Fixed | RHSA-2019:1183 |
| Red Hat Enterprise Linux 8 | kernel-0:4.18.0-80.1.2.el8_0 | Fixed | RHSA-2019:1167 |
| Red Hat Enterprise Linux 8 | kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0 | Fixed | RHSA-2019:1174 |
| Red Hat Enterprise Linux 8 | virt:rhel-8000020190510171727.55190bc5 | Fixed | RHSA-2019:1175 |
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt:8.0.0-8000020190530233731.55190bc5 | Fixed | RHSA-2019:1455 |
| Red Hat Enterprise MRG 2 | kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt | Fixed | RHSA-2019:1190 |
| Red Hat OpenStack Platform 10.0 (Newton) | qemu-kvm-rhev-10:2.12.0-18.el7_6.5 | Fixed | RHSA-2019:1200 |
| Red Hat OpenStack Platform 13.0 (Queens) | qemu-kvm-rhev-10:2.12.0-18.el7_6.5 | Fixed | RHSA-2019:1201 |
| Red Hat OpenStack Platform 14.0 (Rocky) | qemu-kvm-rhev-10:2.12.0-18.el7_6.5 | Fixed | RHSA-2019:1202 |
| Red Hat OpenStack Platform 9.0 (Mitaka) | qemu-kvm-rhev-10:2.12.0-18.el7_6.5 | Fixed | RHSA-2019:1199 |
| Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 | qemu-kvm-rhev-10:2.12.0-18.el7_6.5 | Fixed | RHSA-2019:1179 |
| Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 | qemu-kvm-rhev-10:2.12.0-33.el7 | Fixed | RHSA-2019:2553 |
| Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 | redhat-release-virtualization-host-0:4.3-0.7.el7 | Fixed | RHSA-2019:1207 |
| Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 | redhat-virtualization-host-0:4.3-20190512.0.el7_6 | Fixed | RHSA-2019:1207 |
| Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 | rhvm-appliance-0:4.3-20190506.0.el7 | Fixed | RHSA-2019:1208 |
| Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 | vdsm-0:4.30.13-4.el7ev | Fixed | RHSA-2019:1203 |
| Red Hat Virtualization 4.2 for Red Hat Enterprise Linux 7.6 EUS | redhat-release-virtualization-host-0:4.2-8.6.el7 | Fixed | RHSA-2019:1209 |
| Red Hat Virtualization 4.2 for Red Hat Enterprise Linux 7.6 EUS | redhat-virtualization-host-0:4.2-20190512.0.el7_6 | Fixed | RHSA-2019:1209 |
| Red Hat Virtualization 4.2 for Red Hat Enterprise Linux 7.6 EUS | vdsm-0:4.20.49-1.el7ev | Fixed | RHSA-2019:1204 |
| Red Hat Virtualization Engine 4.2 | rhvm-setup-plugins-0:4.2.14-1.el7ev | Fixed | RHSA-2019:1206 |
| Red Hat Virtualization Engine 4.3 | qemu-kvm-rhev-10:2.12.0-33.el7 | Fixed | RHSA-2019:2553 |
| Red Hat Virtualization Engine 4.3 | rhvm-setup-plugins-0:4.3.1-1.el7ev | Fixed | RHSA-2019:1205 |
| Red Hat Enterprise Linux 5 | kernel | Will not fix | n/a |
| Red Hat Enterprise Linux 7 | kernel-alt | Not affected | n/a |
| Red Hat Virtualization 4 | ovirt-guest-agent | Affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security is aware of this issue. Updates will be released as they become available. For additional information, please refer to the 'Vulnerability Response' URL.
References (26)
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html vendor-advisoryx_refsource_SUSE
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt x_refsource_CONFIRM
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en x_refsource_CONFIRM
- https://access.redhat.com/errata/RHSA-2019:1455 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2019:2553 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2019-11091 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1705312 Issue Tracking
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf x_refsource_CONFIRM
- https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf x_refsource_CONFIRM
- https://kc.mcafee.com/corporate/index?page=content&id=SB10292 x_refsource_CONFIRM
- https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html mailing-listx_refsource_MLIST
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/ vendor-advisoryx_refsource_FEDORA
- https://nvd.nist.gov/vuln/detail/CVE-2019-11091
- https://seclists.org/bugtraq/2019/Jun/28 mailing-listx_refsource_BUGTRAQ
- https://seclists.org/bugtraq/2019/Jun/36 mailing-listx_refsource_BUGTRAQ
- https://seclists.org/bugtraq/2019/Nov/15 mailing-listx_refsource_BUGTRAQ
- https://seclists.org/bugtraq/2020/Jan/21 mailing-listx_refsource_BUGTRAQ
- https://security.gentoo.org/glsa/202003-56 vendor-advisoryx_refsource_GENTOO
- https://usn.ubuntu.com/3977-3/ vendor-advisoryx_refsource_UBUNTU
- https://www.cve.org/CVERecord?id=CVE-2019-11091
- https://www.debian.org/security/2020/dsa-4602 vendor-advisoryx_refsource_DEBIAN
- https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc vendor-advisoryx_refsource_FREEBSD
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html x_refsource_CONFIRMVendor Advisory
- https://www.synology.com/security/advisory/Synology_SA_19_24 x_refsource_CONFIRM
Change history (0)
No recorded changes yet.