What’s Vulnerable › Vulnerabilities

CVE-2019-11135

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-14 · updated 2026-06-17

Description

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

Affected products

• Canonical Ubuntu Linux: 14.04
• Debian Linux: 8.0, 9.0, 10.0
• Fedoraproject Fedora: 30, 31
• HP Apollo 2000 Firmware: before 2.20 — fixed in 2.20
• HP Apollo 4200 Firmware: before 2.20 — fixed in 2.20
• HP Proliant Bl460C Firmware: before 2.20 — fixed in 2.20
• HP Proliant Dl120 Firmware: before 2.20 — fixed in 2.20
• HP Proliant Dl160 Firmware: before 2.20 — fixed in 2.20
• HP Proliant Dl180 Firmware: before 2.20 — fixed in 2.20
• HP Proliant Dl20 Firmware: before 2.10 — fixed in 2.10
• HP Proliant Dl360 Firmware: before 2.20 — fixed in 2.20
• HP Proliant Dl380 Firmware: before 2.20 — fixed in 2.20
• HP Proliant Dl560 Firmware: before 2.20 — fixed in 2.20
• HP Proliant Dl580 Firmware: before 2.20 — fixed in 2.20
• HP Proliant E910 Firmware: before 2.20 — fixed in 2.20
• HP Proliant Ml110 Firmware: before 2.20 — fixed in 2.20
• HP Proliant Ml30 Firmware: before 2.10 — fixed in 2.10
• HP Proliant Ml350 Firmware: before 2.20 — fixed in 2.20
• HP Proliant Xl170R Firmware: before 2.20 — fixed in 2.20
• HP Proliant Xl190R Firmware: before 2.20 — fixed in 2.20
• HP Proliant Xl230K Firmware: before 2.20 — fixed in 2.20
• HP Proliant Xl270D Firmware: before 2.20 — fixed in 2.20
• HP Proliant Xl450 Firmware: before 2.20 — fixed in 2.20
• HP Synergy 480 Firmware: before 2.20 — fixed in 2.20
• HP Synergy 660 Firmware: before 2.20 — fixed in 2.20
• Intel Celeron 5305U Firmware: all versions
• Intel Core I5-10110Y Firmware: all versions
• Intel Core I5-10210U Firmware: all versions
• Intel Core I5-10210Y Firmware: all versions
• Intel Core I5-10310Y Firmware: all versions

How to fix

Upgrade to a fixed version: HP Apollo 2000 Firmware 2.20; HP Apollo 4200 Firmware 2.20; HP Proliant Bl460C Firmware 2.20; HP Proliant Dl120 Firmware 2.20; HP Proliant Dl160 Firmware 2.20; HP Proliant Dl180 Firmware 2.20; HP Proliant Dl20 Firmware 2.10; HP Proliant Dl360 Firmware 2.20; HP Proliant Dl380 Firmware 2.20; HP Proliant Dl560 Firmware 2.20; HP Proliant Dl580 Firmware 2.20; HP Proliant E910 Firmware 2.20. Check the vendor advisory for mitigations.

References

• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html
• http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00042.html
• http://packetstormsecurity.com/files/155375/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
• http://www.openwall.com/lists/oss-security/2019/12/10/3
• http://www.openwall.com/lists/oss-security/2019/12/10/4
• http://www.openwall.com/lists/oss-security/2019/12/11/1
• https://access.redhat.com/errata/RHSA-2019:3936
• https://access.redhat.com/errata/RHSA-2020:0026
• https://access.redhat.com/errata/RHSA-2020:0028
• https://access.redhat.com/errata/RHSA-2020:0204
• https://access.redhat.com/errata/RHSA-2020:0279

Get alerted when CVE-2019-11135 or the next vulnerability affects your stack