Read the docs
TI-2019-08296 Aliases CVE-2019-11091GHSA-25x5-mfj4-w63g

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some…

Priority LOW 26Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 62 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, Red Hat and Microsoft.

Summary

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00607 49th percentileScored 2026-11-07
Fix Partial Red Hat: 43 advisoriesMicrosoft: 1 updateRed Hat: 62 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IntelCentral Processing Units (CPUs)A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf—No fix listedCNA
  • Central Processing Units (CPUs) VendorIntel Affected A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:o:intel:microarchitectural_data_sampling_uncacheable_memory_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableIntel
cpe:2.3:h:intel:microarchitectural_data_sampling_uncacheable_memory:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*29VulnerableFedoraproject
  • cpe:2.3:o:intel:microarchitectural_data_sampling_uncacheable_memory_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
  • cpe:2.3:h:intel:microarchitectural_data_sampling_uncacheable_memory:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* Versions 29 Vulnerable ·Fedoraproject

Remediation

Red Hat 43 advisories

  • RHSA-2019:2553 Released 2019-08-22 · Red Hat rating Important
    qemu-kvm-rhev security, bug fix, and enhancement update
    • RHV-M 4.3 qemu-img-rhev-10:2.12.0-33.el7, qemu-kvm-common-rhev-10:2.12.0-33.el7, qemu-kvm-rhev-10:2.12.0-33.el7 +1
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts qemu-img-rhev-10:2.12.0-33.el7, qemu-kvm-common-rhev-10:2.12.0-33.el7, qemu-kvm-rhev-10:2.12.0-33.el7 +1
  • RHSA-2019:1455 Released 2019-06-11 · Red Hat rating Important
    Advanced Virtualization security update
    • Red Hat Enterprise Linux 8 Advanced Virtualization SLOF-20180702-3.git9b7ab2f.module+el8.0.0+3273+6bc1ee54.noarch::virt:8.0.0, SLOF-20180702-3.git9b7ab2f.module+el8.0.0+3273+6bc1ee54.src::virt:8.0.0, hivex-1.3.15-6.module+el8.0.0+3273+6bc1ee54.aarch64::virt:8.0.0 +47
  • RHSA-2019:1208 Released 2019-05-14 · Red Hat rating Important
    rhvm-appliance security update
    • Red Hat Virtualization 4 Hypervisor for RHEL 7 rhvm-appliance-2:4.3-20190506.0.el7
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts rhvm-appliance-2:4.3-20190506.0.el7
Show 40 more Red Hat advisories
  • RHSA-2019:1209 Released 2019-05-14 · Red Hat rating Important
    redhat-virtualization-host security update
    • Red Hat Virtualization 4.2 Hypervisor for RHEL 7.6 EUS redhat-release-virtualization-host-4.2-8.6.el7, redhat-release-virtualization-host-content-4.2-8.6.el7, redhat-virtualization-host-4.2-20190512.0.el7_6 +2
  • RHSA-2019:1207 Released 2019-05-14 · Red Hat rating Important
    redhat-virtualization-host security update
    • RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-release-virtualization-host-4.3-0.7.el7, redhat-virtualization-host-image-update-placeholder-4.3-0.7.el7
    • Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.3-20190512.0.el7_6, redhat-virtualization-host-image-update-4.3-20190512.0.el7_6
  • RHSA-2019:1206 Released 2019-05-14 · Red Hat rating Important
    rhvm-setup-plugins security update
    • RHV-M 4.2 rhvm-setup-plugins-4.2.14-1.el7ev
  • RHSA-2019:1204 Released 2019-05-14 · Red Hat rating Important
    vdsm security update
    • Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts vdsm-4.20.49-1.el7ev, vdsm-api-4.20.49-1.el7ev, vdsm-client-4.20.49-1.el7ev +18
  • RHSA-2019:1203 Released 2019-05-14 · Red Hat rating Important
    vdsm security update
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts vdsm-4.30.13-4.el7ev, vdsm-api-4.30.13-4.el7ev, vdsm-client-4.30.13-4.el7ev +18
  • RHSA-2019:1205 Released 2019-05-14 · Red Hat rating Important
    rhvm-setup-plugins security update
    • RHV-M 4.3 rhvm-setup-plugins-4.3.1-1.el7ev
  • RHSA-2019:1171 Released 2019-05-14 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 7.3) kernel-3.10.0-514.64.2.el7, kernel-abi-whitelists-3.10.0-514.64.2.el7, kernel-debug-3.10.0-514.64.2.el7 +7
    • Red Hat Enterprise Linux Server E4S (v. 7.3) kernel-3.10.0-514.64.2.el7, kernel-abi-whitelists-3.10.0-514.64.2.el7, kernel-bootwrapper-3.10.0-514.64.2.el7 +8
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.64.2.el7
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.3) kernel-tools-libs-devel-3.10.0-514.64.2.el7
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.64.2.el7
    • Red Hat Enterprise Linux Server TUS (v. 7.3) kernel-3.10.0-514.64.2.el7, kernel-abi-whitelists-3.10.0-514.64.2.el7, kernel-debug-3.10.0-514.64.2.el7 +7
  • RHSA-2019:1188 Released 2019-05-14 · Red Hat rating Important
    qemu-kvm security update
    • Red Hat Enterprise Linux Server AUS (v. 7.2) libcacard-10:1.5.3-105.el7_2.19, qemu-img-10:1.5.3-105.el7_2.19, qemu-kvm-10:1.5.3-105.el7_2.19 +2
    • Red Hat Enterprise Linux Server E4S (v. 7.2) libcacard-10:1.5.3-105.el7_2.19, qemu-img-10:1.5.3-105.el7_2.19, qemu-kvm-10:1.5.3-105.el7_2.19 +2
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.2) libcacard-devel-10:1.5.3-105.el7_2.19, libcacard-tools-10:1.5.3-105.el7_2.19
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.2) libcacard-devel-10:1.5.3-105.el7_2.19, libcacard-tools-10:1.5.3-105.el7_2.19
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.2) libcacard-devel-10:1.5.3-105.el7_2.19, libcacard-tools-10:1.5.3-105.el7_2.19
    • Red Hat Enterprise Linux Server TUS (v. 7.2) libcacard-10:1.5.3-105.el7_2.19, qemu-img-10:1.5.3-105.el7_2.19, qemu-kvm-10:1.5.3-105.el7_2.19 +2
  • RHSA-2019:1186 Released 2019-05-14 · Red Hat rating Important
    libvirt security update
    • Red Hat Enterprise Linux Server AUS (v. 7.2) libvirt-1.2.17-13.el7_2.10, libvirt-client-1.2.17-13.el7_2.10, libvirt-daemon-1.2.17-13.el7_2.10 +13
    • Red Hat Enterprise Linux Server E4S (v. 7.2) libvirt-1.2.17-13.el7_2.10, libvirt-client-1.2.17-13.el7_2.10, libvirt-daemon-1.2.17-13.el7_2.10 +13
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.2) libvirt-daemon-lxc-1.2.17-13.el7_2.10, libvirt-lock-sanlock-1.2.17-13.el7_2.10, libvirt-login-shell-1.2.17-13.el7_2.10
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.2) libvirt-daemon-lxc-1.2.17-13.el7_2.10, libvirt-lock-sanlock-1.2.17-13.el7_2.10, libvirt-login-shell-1.2.17-13.el7_2.10
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.2) libvirt-daemon-lxc-1.2.17-13.el7_2.10, libvirt-lock-sanlock-1.2.17-13.el7_2.10, libvirt-login-shell-1.2.17-13.el7_2.10
    • Red Hat Enterprise Linux Server TUS (v. 7.2) libvirt-1.2.17-13.el7_2.10, libvirt-client-1.2.17-13.el7_2.10, libvirt-daemon-1.2.17-13.el7_2.10 +13
  • RHSA-2019:1189 Released 2019-05-14 · Red Hat rating Important
    qemu-kvm security update
    • Red Hat Enterprise Linux Server AUS (v. 7.3) qemu-img-10:1.5.3-126.el7_3.17, qemu-kvm-10:1.5.3-126.el7_3.17, qemu-kvm-common-10:1.5.3-126.el7_3.17 +1
    • Red Hat Enterprise Linux Server E4S (v. 7.3) qemu-img-10:1.5.3-126.el7_3.17, qemu-kvm-10:1.5.3-126.el7_3.17, qemu-kvm-common-10:1.5.3-126.el7_3.17 +1
    • Red Hat Enterprise Linux Server TUS (v. 7.3) qemu-img-10:1.5.3-126.el7_3.17, qemu-kvm-10:1.5.3-126.el7_3.17, qemu-kvm-common-10:1.5.3-126.el7_3.17 +1
  • RHSA-2019:1197 Released 2019-05-14 · Red Hat rating Important
    libvirt security update
    • Red Hat Enterprise Linux Server AUS (v. 6.5) libvirt-0.10.2-29.el6_5.18, libvirt-client-0.10.2-29.el6_5.18, libvirt-devel-0.10.2-29.el6_5.18 +1
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.5) libvirt-0.10.2-29.el6_5.18, libvirt-lock-sanlock-0.10.2-29.el6_5.18
  • RHSA-2019:1187 Released 2019-05-14 · Red Hat rating Important
    libvirt security update
    • Red Hat Enterprise Linux Server AUS (v. 7.3) libvirt-2.0.0-10.el7_3.14, libvirt-client-2.0.0-10.el7_3.14, libvirt-daemon-2.0.0-10.el7_3.14 +13
    • Red Hat Enterprise Linux Server E4S (v. 7.3) libvirt-2.0.0-10.el7_3.14, libvirt-client-2.0.0-10.el7_3.14, libvirt-daemon-2.0.0-10.el7_3.14 +13
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.3) libvirt-daemon-lxc-2.0.0-10.el7_3.14, libvirt-lock-sanlock-2.0.0-10.el7_3.14, libvirt-login-shell-2.0.0-10.el7_3.14 +1
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.3) libvirt-daemon-kvm-2.0.0-10.el7_3.14, libvirt-daemon-lxc-2.0.0-10.el7_3.14, libvirt-lock-sanlock-2.0.0-10.el7_3.14 +2
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.3) libvirt-daemon-lxc-2.0.0-10.el7_3.14, libvirt-lock-sanlock-2.0.0-10.el7_3.14, libvirt-login-shell-2.0.0-10.el7_3.14 +1
    • Red Hat Enterprise Linux Server TUS (v. 7.3) libvirt-2.0.0-10.el7_3.14, libvirt-client-2.0.0-10.el7_3.14, libvirt-daemon-2.0.0-10.el7_3.14 +13
  • RHSA-2019:1201 Released 2019-05-14 · Red Hat rating Important
    qemu-kvm-rhev security update
    • Red Hat OpenStack Platform 13.0 qemu-img-rhev-10:2.12.0-18.el7_6.5, qemu-kvm-common-rhev-10:2.12.0-18.el7_6.5, qemu-kvm-rhev-10:2.12.0-18.el7_6.5 +1
  • RHSA-2019:1202 Released 2019-05-14 · Red Hat rating Important
    qemu-kvm-rhev security update
    • Red Hat OpenStack Platform 14.0 qemu-img-rhev-10:2.12.0-18.el7_6.5, qemu-kvm-common-rhev-10:2.12.0-18.el7_6.5, qemu-kvm-rhev-10:2.12.0-18.el7_6.5 +1
  • RHSA-2019:1200 Released 2019-05-14 · Red Hat rating Important
    qemu-kvm-rhev security update
    • Red Hat OpenStack Platform 10.0 qemu-img-rhev-10:2.12.0-18.el7_6.5, qemu-kvm-common-rhev-10:2.12.0-18.el7_6.5, qemu-kvm-rhev-10:2.12.0-18.el7_6.5 +1
  • RHSA-2019:1199 Released 2019-05-14 · Red Hat rating Important
    qemu-kvm-rhev security update
    • Red Hat OpenStack Platform 9.0 qemu-img-rhev-10:2.12.0-18.el7_6.5, qemu-kvm-common-rhev-10:2.12.0-18.el7_6.5, qemu-kvm-rhev-10:2.12.0-18.el7_6.5 +1
  • RHSA-2019:1194 Released 2019-05-14 · Red Hat rating Important
    libvirt security update
    • Red Hat Enterprise Linux Server AUS (v. 6.6) libvirt-0.10.2-46.el6_6.10, libvirt-client-0.10.2-46.el6_6.10, libvirt-devel-0.10.2-46.el6_6.10 +1
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.6) libvirt-lock-sanlock-0.10.2-46.el6_6.10
  • RHSA-2019:1190 Released 2019-05-14 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat MRG Realtime for RHEL 6 Server v.2 kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt, kernel-rt-debug-1:3.10.0-693.47.2.rt56.641.el6rt, kernel-rt-debug-devel-1:3.10.0-693.47.2.rt56.641.el6rt +7
  • RHSA-2019:1172 Released 2019-05-14 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 7.2) kernel-3.10.0-327.78.2.el7, kernel-abi-whitelists-3.10.0-327.78.2.el7, kernel-debug-3.10.0-327.78.2.el7 +7
    • Red Hat Enterprise Linux Server E4S (v. 7.2) kernel-3.10.0-327.78.2.el7, kernel-abi-whitelists-3.10.0-327.78.2.el7, kernel-debug-3.10.0-327.78.2.el7 +7
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.78.2.el7
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.2) kernel-tools-libs-devel-3.10.0-327.78.2.el7
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.78.2.el7
    • Red Hat Enterprise Linux Server TUS (v. 7.2) kernel-3.10.0-327.78.2.el7, kernel-abi-whitelists-3.10.0-327.78.2.el7, kernel-debug-3.10.0-327.78.2.el7 +7
  • RHSA-2019:1198 Released 2019-05-14 · Red Hat rating Important
    qemu-kvm security update
    • Red Hat Enterprise Linux Server AUS (v. 6.5) qemu-guest-agent-2:0.12.1.2-2.415.el6_5.20, qemu-img-2:0.12.1.2-2.415.el6_5.20, qemu-kvm-2:0.12.1.2-2.415.el6_5.20 +1
  • RHSA-2019:1195 Released 2019-05-14 · Red Hat rating Important
    qemu-kvm security update
    • Red Hat Enterprise Linux Server AUS (v. 6.6) qemu-guest-agent-2:0.12.1.2-2.448.el6_6.8, qemu-img-2:0.12.1.2-2.448.el6_6.8, qemu-kvm-2:0.12.1.2-2.448.el6_6.8 +1
  • RHSA-2019:1193 Released 2019-05-14 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server AUS (v. 6.6) kernel-2.6.32-504.78.2.el6, kernel-abi-whitelists-2.6.32-504.78.2.el6, kernel-debug-2.6.32-504.78.2.el6 +5
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.6) python-perf-2.6.32-504.78.2.el6
  • RHSA-2019:1196 Released 2019-05-14 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server AUS (v. 6.5) kernel-2.6.32-431.94.2.el6, kernel-abi-whitelists-2.6.32-431.94.2.el6, kernel-debug-2.6.32-431.94.2.el6 +5
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.5) kernel-2.6.32-431.94.2.el6, python-perf-2.6.32-431.94.2.el6
  • RHSA-2019:1177 Released 2019-05-14 · Red Hat rating Important
    libvirt security update
    • Red Hat Enterprise Linux Client (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-bash-completion-4.5.0-10.el7_6.9, libvirt-client-4.5.0-10.el7_6.9 +21
    • Red Hat Enterprise Linux Client Optional (v. 7) libvirt-admin-4.5.0-10.el7_6.9, libvirt-daemon-lxc-4.5.0-10.el7_6.9, libvirt-devel-4.5.0-10.el7_6.9 +4
    • Red Hat Enterprise Linux ComputeNode (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-bash-completion-4.5.0-10.el7_6.9, libvirt-client-4.5.0-10.el7_6.9 +1
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-admin-4.5.0-10.el7_6.9, libvirt-daemon-4.5.0-10.el7_6.9 +25
    • Red Hat Enterprise Linux Server (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-bash-completion-4.5.0-10.el7_6.9, libvirt-client-4.5.0-10.el7_6.9 +26
    • Red Hat Enterprise Linux Server Optional (v. 7) libvirt-admin-4.5.0-10.el7_6.9, libvirt-daemon-lxc-4.5.0-10.el7_6.9, libvirt-lock-sanlock-4.5.0-10.el7_6.9 +3
    • Red Hat Enterprise Linux Workstation (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-bash-completion-4.5.0-10.el7_6.9, libvirt-client-4.5.0-10.el7_6.9 +23
    • Red Hat Enterprise Linux Workstation Optional (v. 7) libvirt-admin-4.5.0-10.el7_6.9, libvirt-daemon-lxc-4.5.0-10.el7_6.9, libvirt-lock-sanlock-4.5.0-10.el7_6.9 +2
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-bash-completion-4.5.0-10.el7_6.9, libvirt-client-4.5.0-10.el7_6.9 +21
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-admin-4.5.0-10.el7_6.9, libvirt-bash-completion-4.5.0-10.el7_6.9 +26
  • RHSA-2019:1168 Released 2019-05-14 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-957.12.2.el7, kernel-3.10.0-957.12.2.el7, kernel-abi-whitelists-3.10.0-957.12.2.el7 +8
    • Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.12.2.el7
    • Red Hat Enterprise Linux ComputeNode (v. 7) bpftool-3.10.0-957.12.2.el7, kernel-3.10.0-957.12.2.el7, kernel-abi-whitelists-3.10.0-957.12.2.el7 +8
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.12.2.el7
    • Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-957.12.2.el7, kernel-3.10.0-957.12.2.el7, kernel-abi-whitelists-3.10.0-957.12.2.el7 +11
    • Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-957.12.2.el7, kernel-tools-libs-devel-3.10.0-957.12.2.el7
    • Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-957.12.2.el7, kernel-3.10.0-957.12.2.el7, kernel-abi-whitelists-3.10.0-957.12.2.el7 +8
    • Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.12.2.el7
  • RHSA-2019:1182 Released 2019-05-14 · Red Hat rating Important
    libvirt security update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) libvirt-3.9.0-14.el7_5.9, libvirt-client-3.9.0-14.el7_5.9, libvirt-libs-3.9.0-14.el7_5.9
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) libvirt-3.9.0-14.el7_5.9, libvirt-admin-3.9.0-14.el7_5.9, libvirt-daemon-3.9.0-14.el7_5.9 +25
    • Red Hat Enterprise Linux Server EUS (v. 7.5) libvirt-3.9.0-14.el7_5.9, libvirt-client-3.9.0-14.el7_5.9, libvirt-client-3.9.0-14.el7_5.9.ppc +25
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.5) libvirt-admin-3.9.0-14.el7_5.9, libvirt-daemon-lxc-3.9.0-14.el7_5.9, libvirt-lock-sanlock-3.9.0-14.el7_5.9 +3
  • RHSA-2019:1178 Released 2019-05-14 · Red Hat rating Important
    qemu-kvm security update
    • Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-160.el7_6.2, qemu-kvm-10:1.5.3-160.el7_6.2, qemu-kvm-common-10:1.5.3-160.el7_6.2 +1
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-160.el7_6.2, qemu-kvm-10:1.5.3-160.el7_6.2, qemu-kvm-common-10:1.5.3-160.el7_6.2 +1
    • Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-160.el7_6.2, qemu-kvm-10:1.5.3-160.el7_6.2, qemu-kvm-common-10:1.5.3-160.el7_6.2 +1
    • Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-160.el7_6.2, qemu-kvm-10:1.5.3-160.el7_6.2, qemu-kvm-common-10:1.5.3-160.el7_6.2 +1
  • RHSA-2019:1184 Released 2019-05-14 · Red Hat rating Important
    libvirt security update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) libvirt-3.2.0-14.el7_4.13, libvirt-client-3.2.0-14.el7_4.13, libvirt-libs-3.2.0-14.el7_4.13
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) libvirt-3.2.0-14.el7_4.13, libvirt-admin-3.2.0-14.el7_4.13, libvirt-daemon-3.2.0-14.el7_4.13 +25
    • Red Hat Enterprise Linux Server EUS (v. 7.4) libvirt-3.2.0-14.el7_4.13, libvirt-client-3.2.0-14.el7_4.13, libvirt-client-3.2.0-14.el7_4.13.ppc +25
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.4) libvirt-admin-3.2.0-14.el7_4.13, libvirt-daemon-lxc-3.2.0-14.el7_4.13, libvirt-lock-sanlock-3.2.0-14.el7_4.13 +3
  • RHSA-2019:1170 Released 2019-05-14 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) kernel-3.10.0-693.47.2.el7, kernel-abi-whitelists-3.10.0-693.47.2.el7, kernel-debug-3.10.0-693.47.2.el7 +7
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.47.2.el7
    • Red Hat Enterprise Linux Server EUS (v. 7.4) kernel-3.10.0-693.47.2.el7, kernel-abi-whitelists-3.10.0-693.47.2.el7, kernel-bootwrapper-3.10.0-693.47.2.el7 +10
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.4) kernel-debug-devel-3.10.0-693.47.2.el7, kernel-tools-libs-devel-3.10.0-693.47.2.el7
  • RHSA-2019:1155 Released 2019-05-14 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) kernel-3.10.0-862.32.2.el7, kernel-abi-whitelists-3.10.0-862.32.2.el7, kernel-debug-3.10.0-862.32.2.el7 +7
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) kernel-tools-libs-devel-3.10.0-862.32.2.el7
    • Red Hat Enterprise Linux Server EUS (v. 7.5) kernel-3.10.0-862.32.2.el7, kernel-abi-whitelists-3.10.0-862.32.2.el7, kernel-bootwrapper-3.10.0-862.32.2.el7 +10
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.5) kernel-debug-devel-3.10.0-862.32.2.el7, kernel-tools-libs-devel-3.10.0-862.32.2.el7
  • RHSA-2019:1183 Released 2019-05-14 · Red Hat rating Important
    qemu-kvm security update
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) qemu-img-10:1.5.3-156.el7_5.7, qemu-kvm-10:1.5.3-156.el7_5.7, qemu-kvm-common-10:1.5.3-156.el7_5.7 +1
    • Red Hat Enterprise Linux Server EUS (v. 7.5) qemu-img-10:1.5.3-156.el7_5.7, qemu-kvm-10:1.5.3-156.el7_5.7, qemu-kvm-common-10:1.5.3-156.el7_5.7 +1
  • RHSA-2019:1185 Released 2019-05-14 · Red Hat rating Important
    qemu-kvm security update
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) qemu-img-10:1.5.3-141.el7_4.10, qemu-kvm-10:1.5.3-141.el7_4.10, qemu-kvm-common-10:1.5.3-141.el7_4.10 +1
    • Red Hat Enterprise Linux Server EUS (v. 7.4) qemu-img-10:1.5.3-141.el7_4.10, qemu-kvm-10:1.5.3-141.el7_4.10, qemu-kvm-common-10:1.5.3-141.el7_4.10 +1
  • RHSA-2019:1176 Released 2019-05-14 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux Realtime (v. 7) kernel-rt-3.10.0-957.12.2.rt56.929.el7, kernel-rt-debug-3.10.0-957.12.2.rt56.929.el7, kernel-rt-debug-devel-3.10.0-957.12.2.rt56.929.el7 +4
    • Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-957.12.2.rt56.929.el7, kernel-rt-debug-3.10.0-957.12.2.rt56.929.el7, kernel-rt-debug-devel-3.10.0-957.12.2.rt56.929.el7 +7
  • RHSA-2019:1179 Released 2019-05-14 · Red Hat rating Important
    qemu-kvm-rhev security update
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts qemu-img-rhev-10:2.12.0-18.el7_6.5, qemu-kvm-common-rhev-10:2.12.0-18.el7_6.5, qemu-kvm-rhev-10:2.12.0-18.el7_6.5 +1
  • RHSA-2019:1169 Released 2019-05-14 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-754.14.2.el6, kernel-abi-whitelists-2.6.32-754.14.2.el6, kernel-debug-2.6.32-754.14.2.el6 +5
    • Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-754.14.2.el6
    • Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-754.14.2.el6, kernel-abi-whitelists-2.6.32-754.14.2.el6, kernel-debug-2.6.32-754.14.2.el6 +5
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-754.14.2.el6
    • Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-754.14.2.el6, kernel-abi-whitelists-2.6.32-754.14.2.el6, kernel-bootwrapper-2.6.32-754.14.2.el6 +8
    • Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-754.14.2.el6
    • Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-754.14.2.el6, kernel-abi-whitelists-2.6.32-754.14.2.el6, kernel-debug-2.6.32-754.14.2.el6 +5
    • Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-754.14.2.el6
  • RHSA-2019:1180 Released 2019-05-14 · Red Hat rating Important
    libvirt security update
    • Red Hat Enterprise Linux Desktop (v. 6) libvirt-0.10.2-64.el6_10.1, libvirt-client-0.10.2-64.el6_10.1, libvirt-python-0.10.2-64.el6_10.1
    • Red Hat Enterprise Linux Desktop Optional (v. 6) libvirt-devel-0.10.2-64.el6_10.1, libvirt-lock-sanlock-0.10.2-64.el6_10.1
    • Red Hat Enterprise Linux HPC Node (v. 6) libvirt-0.10.2-64.el6_10.1, libvirt-client-0.10.2-64.el6_10.1, libvirt-python-0.10.2-64.el6_10.1
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) libvirt-devel-0.10.2-64.el6_10.1, libvirt-lock-sanlock-0.10.2-64.el6_10.1
    • Red Hat Enterprise Linux Server (v. 6) libvirt-0.10.2-64.el6_10.1, libvirt-client-0.10.2-64.el6_10.1, libvirt-client-0.10.2-64.el6_10.1.ppc +3
    • Red Hat Enterprise Linux Server Optional (v. 6) libvirt-lock-sanlock-0.10.2-64.el6_10.1
    • Red Hat Enterprise Linux Workstation (v. 6) libvirt-0.10.2-64.el6_10.1, libvirt-client-0.10.2-64.el6_10.1, libvirt-devel-0.10.2-64.el6_10.1 +1
    • Red Hat Enterprise Linux Workstation Optional (v. 6) libvirt-lock-sanlock-0.10.2-64.el6_10.1
  • RHSA-2019:1181 Released 2019-05-14 · Red Hat rating Important
    qemu-kvm security update
    • Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.3, qemu-img-2:0.12.1.2-2.506.el6_10.3, qemu-kvm-2:0.12.1.2-2.506.el6_10.3 +1
    • Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.3, qemu-img-2:0.12.1.2-2.506.el6_10.3, qemu-kvm-2:0.12.1.2-2.506.el6_10.3 +1
    • Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.3, qemu-img-2:0.12.1.2-2.506.el6_10.3, qemu-kvm-2:0.12.1.2-2.506.el6_10.3 +1
    • Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.3, qemu-img-2:0.12.1.2-2.506.el6_10.3, qemu-kvm-2:0.12.1.2-2.506.el6_10.3 +1
  • RHSA-2019:1175 Released 2019-05-14 · Red Hat rating Important
    virt:rhel security update
    • Red Hat Enterprise Linux AppStream (v. 8) SLOF-20171214-5.gitfa98132.module+el8.0.0+3075+09be6b65.noarch::virt:rhel, SLOF-20171214-5.gitfa98132.module+el8.0.0+3075+09be6b65.src::virt:rhel, hivex-1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64::virt:rhel +47
  • RHSA-2019:1167 Released 2019-05-14 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-80.1.2.el8_0
    • Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-80.1.2.el8_0, kernel-4.18.0-80.1.2.el8_0, kernel-abi-whitelists-4.18.0-80.1.2.el8_0 +19
  • RHSA-2019:1174 Released 2019-05-14 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux Real Time (v. 8) kernel-rt-4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-core-4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-debug-4.18.0-80.1.2.rt9.145.el8_0 +7
    • Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-core-4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-debug-4.18.0-80.1.2.rt9.145.el8_0 +9

Microsoft 1 update

  • ADV190013
    Microsoft Guidance to mitigate Microarchitectural Data Sampling vulnerabilities

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Intel Central Processing Units (CPUs) — openSUSE-SU-2019:1505

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2018-08699 Information disclosure in Intel Central Processing UnitsPriority LOW 30
    • TI-2018-08698 Information disclosure in Intel Central Processing UnitsPriority LOW 28
    Show all 3 records → Advisory →
  • Advisory ·

    Intel Central Processing Units (CPUs) — openSUSE-SU-2019:1806

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2018-08699 Information disclosure in Intel Central Processing UnitsPriority LOW 30
    • TI-2018-08698 Information disclosure in Intel Central Processing UnitsPriority LOW 28
    Show all 3 records → Advisory →
Show 4 more groups
  • Advisory ·

    Intel Central Processing Units (CPUs) — openSUSE-SU-2019:1805

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2018-08699 Information disclosure in Intel Central Processing UnitsPriority LOW 30
    • TI-2018-08698 Information disclosure in Intel Central Processing UnitsPriority LOW 28
    Show all 3 records → Advisory →
  • Advisory ·

    Intel Central Processing Units (CPUs) — FEDORA-2019-1f5832fc0e

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2018-08699 Information disclosure in Intel Central Processing UnitsPriority LOW 30
    • TI-2018-08698 Information disclosure in Intel Central Processing UnitsPriority LOW 28
    Show all 3 records → Advisory →
  • Advisory ·

    Intel Central Processing Units (CPUs) — USN-3977-3

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2018-08699 Information disclosure in Intel Central Processing UnitsPriority LOW 30
    • TI-2018-08698 Information disclosure in Intel Central Processing UnitsPriority LOW 28
    Show all 3 records → Advisory →
  • Advisory ·

    Intel Central Processing Units (CPUs) — FreeBSD-SA-19:07

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2018-08699 Information disclosure in Intel Central Processing UnitsPriority LOW 30
    • TI-2018-08698 Information disclosure in Intel Central Processing UnitsPriority LOW 28
    Show all 3 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Virtualization 4AffectedNo fix yet
RHEL 7-based RHEV-H for RHEV 4 (build requirements)Fixed RHSA-2019:1207
RHV-M 4.2Fixed RHSA-2019:1206
RHV-M 4.3Fixed RHSA-2019:1205, RHSA-2019:2553
Red Hat CodeReady Linux Builder (v. 8)Fixed RHSA-2019:1167
Red Hat Enterprise Linux 8 Advanced VirtualizationFixed RHSA-2019:1455
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2019:1175
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2019:1167
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2019:1168, RHSA-2019:1177, RHSA-2019:1178
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2019:1168, RHSA-2019:1177
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2019:1168, RHSA-2019:1177
Red Hat Enterprise Linux ComputeNode EUS (v. 7.4)Fixed RHSA-2019:1170, RHSA-2019:1184
Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)Fixed RHSA-2019:1155, RHSA-2019:1182
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2019:1168, RHSA-2019:1177, RHSA-2019:1178
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4)Fixed RHSA-2019:1170, RHSA-2019:1184, RHSA-2019:1185
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5)Fixed RHSA-2019:1155, RHSA-2019:1182, RHSA-2019:1183
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2019:1169, RHSA-2019:1180, RHSA-2019:1181
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2019:1169, RHSA-2019:1180
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2019:1169, RHSA-2019:1180, RHSA-2019:1181
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2019:1169, RHSA-2019:1180
Red Hat Enterprise Linux Real Time (v. 8)Fixed RHSA-2019:1174
Red Hat Enterprise Linux Real Time for NFV (v. 8)Fixed RHSA-2019:1174
Red Hat Enterprise Linux Realtime (v. 7)Fixed RHSA-2019:1176
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2019:1169, RHSA-2019:1180, RHSA-2019:1181
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2019:1168, RHSA-2019:1177, RHSA-2019:1178
Red Hat Enterprise Linux Server AUS (v. 6.5)Fixed RHSA-2019:1196, RHSA-2019:1197, RHSA-2019:1198
Red Hat Enterprise Linux Server AUS (v. 6.6)Fixed RHSA-2019:1193, RHSA-2019:1194, RHSA-2019:1195
Red Hat Enterprise Linux Server AUS (v. 7.2)Fixed RHSA-2019:1172, RHSA-2019:1186, RHSA-2019:1188
Red Hat Enterprise Linux Server AUS (v. 7.3)Fixed RHSA-2019:1171, RHSA-2019:1187, RHSA-2019:1189
Red Hat Enterprise Linux Server E4S (v. 7.2)Fixed RHSA-2019:1172, RHSA-2019:1186, RHSA-2019:1188
Red Hat Enterprise Linux Server E4S (v. 7.3)Fixed RHSA-2019:1171, RHSA-2019:1187, RHSA-2019:1189
Red Hat Enterprise Linux Server EUS (v. 7.4)Fixed RHSA-2019:1170, RHSA-2019:1184, RHSA-2019:1185
Red Hat Enterprise Linux Server EUS (v. 7.5)Fixed RHSA-2019:1155, RHSA-2019:1182, RHSA-2019:1183
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2019:1169, RHSA-2019:1180
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2019:1168, RHSA-2019:1177
Red Hat Enterprise Linux Server Optional AUS (v. 6.5)Fixed RHSA-2019:1196, RHSA-2019:1197
Red Hat Enterprise Linux Server Optional AUS (v. 6.6)Fixed RHSA-2019:1193, RHSA-2019:1194
Red Hat Enterprise Linux Server Optional AUS (v. 7.2)Fixed RHSA-2019:1172, RHSA-2019:1186, RHSA-2019:1188
Red Hat Enterprise Linux Server Optional AUS (v. 7.3)Fixed RHSA-2019:1171, RHSA-2019:1187
Red Hat Enterprise Linux Server Optional E4S (v. 7.2)Fixed RHSA-2019:1172, RHSA-2019:1186, RHSA-2019:1188
Red Hat Enterprise Linux Server Optional E4S (v. 7.3)Fixed RHSA-2019:1171, RHSA-2019:1187
Red Hat Enterprise Linux Server Optional EUS (v. 7.4)Fixed RHSA-2019:1170, RHSA-2019:1184
Red Hat Enterprise Linux Server Optional EUS (v. 7.5)Fixed RHSA-2019:1155, RHSA-2019:1182
Red Hat Enterprise Linux Server Optional TUS (v. 7.2)Fixed RHSA-2019:1172, RHSA-2019:1186, RHSA-2019:1188
Red Hat Enterprise Linux Server Optional TUS (v. 7.3)Fixed RHSA-2019:1171, RHSA-2019:1187
Red Hat Enterprise Linux Server TUS (v. 7.2)Fixed RHSA-2019:1172, RHSA-2019:1186, RHSA-2019:1188
Red Hat Enterprise Linux Server TUS (v. 7.3)Fixed RHSA-2019:1171, RHSA-2019:1187, RHSA-2019:1189
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2019:1169, RHSA-2019:1180, RHSA-2019:1181
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2019:1168, RHSA-2019:1177, RHSA-2019:1178
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2019:1169, RHSA-2019:1180
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2019:1168, RHSA-2019:1177
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2019:1177
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2019:1177
Red Hat Enterprise Linux for Real Time for NFV (v. 7)Fixed RHSA-2019:1176
Red Hat MRG Realtime for RHEL 6 Server v.2Fixed RHSA-2019:1190
Red Hat OpenStack Platform 10.0Fixed RHSA-2019:1200
Red Hat OpenStack Platform 13.0Fixed RHSA-2019:1201
Red Hat OpenStack Platform 14.0Fixed RHSA-2019:1202
Red Hat OpenStack Platform 9.0Fixed RHSA-2019:1199
Red Hat Virtualization 4 Hypervisor for RHEL 7Fixed RHSA-2019:1207, RHSA-2019:1208
Red Hat Virtualization 4 Management Agent for RHEL 7 HostsFixed RHSA-2019:1179, RHSA-2019:1203, RHSA-2019:1208, RHSA-2019:2553
Red Hat Virtualization 4.2 Hypervisor for RHEL 7.6 EUSFixed RHSA-2019:1209
Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS HostsFixed RHSA-2019:1204
Not affected: 1 product
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-11091
  2. 2026-10-03 Alias added: GHSA-25x5-mfj4-w63g

References

Advisory 11

Other 11

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences