CVE-2020-12912 Information disclosure in AMD extension to Linux "hwmon" for Zen1 platforms
Attackers can exploit the Linux RAPL interface to perform side-channel attacks and disclose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-12912?
CVE-2020-12912 is a medium-severity vulnerability in AMD extension to Linux "hwmon" for Zen1 platforms, published on 12 Nov 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
Which versions are affected by CVE-2020-12912?
It affects 1 product.
Products include Amd Energy Driver for Linux.
How do I fix CVE-2020-12912?
Apply the vendor's patch.
Is CVE-2020-12912 being exploited?
There is no known exploitation of CVE-2020-12912 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2020-12912, GHSA-329v-cj6c-rhmq, UBUNTU-CVE-2020-12912.