Bug 699998

Summary:	kernel: TSX Asynchronous Abort (CVE-2019-11135)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Kernel	Assignee:	Gentoo Kernel Security <security-kernel>
Status:	RESOLVED FIXED
Severity:	minor	CC:	kernel, tobias.pal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	A4 [stable blocked]
Package list:		Runtime testing required:	---
Bug Depends on:	700416
Bug Blocks:	699994

Description GLSAMaker/CVETool Bot gentoo-dev

2019-11-13 11:08:33 UTC

CVE-2019-11135 (https://nvd.nist.gov/vuln/detail/CVE-2019-11135):
  A flaw was found in the implementation of Intel Transactional
  Synchronization Extensions (TSX) abortion where a local authenticated
  attacker with the ability to monitor execution time is able to infer TSX
  memory state by comparing abort execution times.

Comment 1 Thomas Deutschmann (RETIRED) gentoo-dev

2019-11-17 23:14:57 UTC

All patches are included in

>=sys-kernel/gentoo-sources-4.19.84
>=sys-kernel/gentoo-sources-4.14.154
>=sys-kernel/gentoo-sources-4.9.202
>=sys-kernel/gentoo-sources-4.4.202

However we will wait for next kernel version to stabilize with patches for bug 699754.