Skip to content
Fencer Intel
medium 6.5

CVE-2019-11135 json

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable informa…

published 6y ago modified 4mo ago also EUVD-2019-2839

cvss
6.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
3.1%
EPSS 3.1% chance of exploitation in 30 days, percentile 87%
public exploits
0
none known

Summary

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

Patch / fix

  • hp apollo_4200_firmware 2.20
  • hp apollo_2000_firmware 2.20
  • hp proliant_bl460c_firmware 2.20
  • hp proliant_dl580_firmware 2.20
  • hp proliant_dl560_firmware 2.20
  • hp proliant_dl380_firmware 2.20
  • hp proliant_dl360_firmware 2.20
  • hp proliant_dl180_firmware 2.20
  • hp proliant_dl160_firmware 2.20
  • hp proliant_dl120_firmware 2.20
  • hp proliant_dl20_firmware 2.10
  • hp proliant_ml350_firmware 2.20
  • hp proliant_ml110_firmware 2.20
  • hp proliant_ml30_firmware 2.10
  • hp proliant_xl450_firmware 2.20
  • hp proliant_xl270d_firmware 2.20
  • hp proliant_xl230k_firmware 2.20
  • hp proliant_xl190r_firmware 2.20
  • hp proliant_xl170r_firmware 2.20
  • hp synergy_480_firmware 2.20
  • xen Debian 14, Debian 13, Debian 12 4.11.3+24-g14b62ab3e5-1
  • linux Debian 14, Debian 13, Debian 12 5.3.9-2
  • intel-microcode Debian 14, Debian 13, Debian 12 3.20191112.1

debian advisories DEBIAN-CVE-2019-11135

  • linux Ubuntu 16.04 LTS 4.4.0-168.197
  • linux Ubuntu 18.04 LTS 4.15.0-69.78
  • linux-aws Ubuntu 16.04 LTS 4.4.0-1098.109
  • linux-aws Ubuntu 18.04 LTS 4.15.0-1054.56
  • linux-gcp Ubuntu 16.04 LTS 4.15.0-1049.52
  • linux-gcp Ubuntu 18.04 LTS 5.0.0-1025.26~18.04.1
  • linux-hwe Ubuntu 16.04 LTS 4.15.0-69.78~16.04.1
  • linux-hwe Ubuntu 18.04 LTS 5.0.0-35.38~18.04.1

ubuntu advisories UBUNTU-CVE-2019-11135

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • qemu-kvm RHEL 7 10:1.5.3-167.el7_7.4
  • qemu-img RHEL 7 10:1.5.3-167.el7_7.4
  • qemu-kvm-tools RHEL 7 10:1.5.3-167.el7_7.4
  • qemu-kvm-common RHEL 7 10:1.5.3-167.el7_7.4
  • SLOF advanced virtualization 8.1 20190703-1.gitba1ab360.module+el8.1.0+3730+7d905127
  • hivex advanced virtualization 8.1 1.3.15-7.module+el8.1.0+3554+1a3a94a6
  • netcf advanced virtualization 8.1 0.2.8-12.module+el8.1.0+3921+a49f7d7b
  • swtpm advanced virtualization 8.1 0.1.0-1.20190425gitca85606.module+el8.1.0+3966+4a23dca1.1

red hat advisories RHSA-2020:0204RHSA-2020:0666RHSA-2020:0366RHSA-2020:0555RHSA-2020:0730RHSA-2020:0279

  • kernel-rt Real Time Module 15 SP6, openSUSE Leap 15.6 6.4.0-150600.10.49.1
  • kernel-syms-rt Real Time Module 15 SP6, openSUSE Leap 15.6 6.4.0-150600.10.49.1
  • kernel-rt_debug Real Time Module 15 SP6, openSUSE Leap 15.6 6.4.0-150600.10.49.1
  • kernel-source-rt Real Time Module 15 SP6, openSUSE Leap 15.6 6.4.0-150600.10.49.1
  • kernel-azure SLE Module for Public Cloud 15 SP7 6.4.0-150700.20.11.1
  • kernel-syms-azure SLE Module for Public Cloud 15 SP7 6.4.0-150700.20.11.1
  • kernel-source-azure SLE Module for Public Cloud 15 SP7 6.4.0-150700.20.11.1
  • kernel-64kb SLE Module for Basesystem 15 SP7 6.4.0-150700.53.11.1

suse advisories SUSE-SU-2025:03023-1SUSE-SU-2025:03011-1SUSE-SU-2025:02997-1SUSE-SU-2025:02996-1SUSE-SU-2025:20586-1SUSE-SU-2025:20602-1

  • libvirt openSUSE Tumbleweed 7.7.0-2.1
  • qemu openSUSE Tumbleweed 6.1.0-32.1
  • spectre-meltdown-checker openSUSE Tumbleweed 0.44-1.2
  • ucode-intel openSUSE Tumbleweed 20210608-1.2
  • spectre-meltdown-checker openSUSE Leap 15.1 0.43-lp151.3.3.1
  • ucode-intel openSUSE Leap 15.1 20191112a-lp151.2.12.1
  • ucode-intel openSUSE Leap 15.0 20191112a-lp150.2.33.1
  • qemu openSUSE Leap 15.1 3.1.1.1-lp151.7.6.1

opensuse advisories openSUSE-SU-2024:11008-1openSUSE-SU-2024:11287-1openSUSE-SU-2024:11396-1openSUSE-SU-2024:11478-1openSUSE-SU-2019:2710-1openSUSE-SU-2019:2528-1

  • netcf AlmaLinux 8 0.2.8-12.module_el8.5.0+2608+72063365
  • netcf AlmaLinux 8 0.2.8-12.module_el8.6.0+2880+7d9e3703
  • netcf AlmaLinux 8 0.2.8-12.module_el8.3.0+2048+e7a0a3ea
  • sgabios AlmaLinux 8 1:0.20170427git-3.module_el8.5.0+2608+72063365
  • sgabios AlmaLinux 8 1:0.20170427git-3.module_el8.3.0+2048+e7a0a3ea
  • libiscsi AlmaLinux 8 1.18.0-8.module_el8.6.0+2880+7d9e3703
  • libiscsi AlmaLinux 8 1.18.0-8.module_el8.5.0+2608+72063365
  • libiscsi AlmaLinux 8 1.18.0-8.module_el8.3.0+2048+e7a0a3ea

almalinux advisories ALSA-2020:0279

  • netcf Rocky Linux 8 0.2.8-12.module+el8.7.0+1084+97b81f61
  • netcf Rocky Linux 8 0.2.8-12.module+el8.4.0+534+4680a14e
  • netcf Rocky Linux 8 0.2.8-12.module+el8.6.0+847+b490afdd
  • sgabios Rocky Linux 8 1:0.20170427git-3.module+el8.7.0+1084+97b81f61
  • sgabios Rocky Linux 8 1:0.20170427git-3.module+el8.4.0+534+4680a14e
  • sgabios Rocky Linux 8 1:0.20170427git-3.module+el8.6.0+847+b490afdd
  • libiscsi Rocky Linux 8 1.18.0-8.module+el8.7.0+1084+97b81f61
  • libiscsi Rocky Linux 8 1.18.0-8.module+el8.4.0+534+4680a14e

rocky linux advisories RLSA-2020:0279

  • xen Alpine 3.10 4.12.1-r1
  • xen Alpine 3.24, Alpine 3.23, Alpine 3.22 +11 more 4.13.0-r0
  • xen Alpine 3.8 4.10.4-r1
  • xen Alpine 3.9 4.11.2-r1
  • intel-ucode Alpine 3.24, Alpine 3.23, Alpine 3.22 +10 more 20190918-r0
  • intel-ucode Alpine 3.24, Alpine 3.23, Alpine 3.22 +10 more 20191112-r0
  • intel-ucode Alpine 3.24, Alpine 3.23, Alpine 3.22 +10 more 20191113-r0

alpine advisories ALPINE-CVE-2019-11135

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • intel-ucode Arch Linux 20191112-1

arch linux advisories AVG-1068

Is CVE-2019-11135 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2019-11135 updated cvss 6.5

hw: TSX Transaction Asynchronous Abort (TAA)

  • Red Hat Enterprise Linux 5 kernel, microcode_ctl
    affected: workaround, no fix planned “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort”
  • Red Hat Enterprise Linux 6 microcode_ctl Red Hat Enterprise Linux 7 libvirt, libvirt-nss, libvirt-libs, libvirt-admin, microcode_ctl, qemu-kvm-rhev, +26 more Red Hat Enterprise Linux 8 microcode_ctl Red Hat Enterprise Linux 8 Advanced Virtualization qemu-img, qemu-kvm, qemu-kiwi, qemu-kvm-core, qemu-kvm-tests, qemu-kvm-common, +9 more
    affected: workaround, no fix available “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort”
  • Red Hat Advanced Virtualization CodeReady Builder for RHEL 8.1.0 hivex 1.3.15-7.module+el8.1.0+3554+1a3a94a6, netcf 0.2.8-12.module+el8.1.0+3921+a49f7d7b, seabios 1.12.0-5.module+el8.1.0+4754+8d38b36b, libiscsi 1.18.0-8.module+el8.1.0+3554+1a3a94a6, libvirt 5.6.0-6.2.module+el8.1.0+4953+432c8346, netcf-libs 0.2.8-12.module+el8.1.0+3921+a49f7d7b, +41 more Red Hat Advanced Virtualization for RHEL 8.1.0 hivex 1.3.15-7.module+el8.1.0+3554+1a3a94a6, netcf 0.2.8-12.module+el8.1.0+3921+a49f7d7b, nbdkit 1.12.5-1.module+el8.1.0+3868+35f94834, seabios 1.12.0-5.module+el8.1.0+4754+8d38b36b, libiscsi 1.18.0-8.module+el8.1.0+3554+1a3a94a6, libvirt 5.6.0-6.2.module+el8.1.0+4953+432c8346, +92 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2020:0555
  • Red Hat CodeReady Linux Builder (v. 8) hivex 1.3.15-7.module+el8.1.0+4066+0f1aadab, netcf 0.2.8-12.module+el8.1.0+4066+0f1aadab, seabios 1.11.1-4.module+el8.1.0+4066+0f1aadab, libiscsi 1.18.0-8.module+el8.1.0+4066+0f1aadab, libvirt 4.5.0-35.2.module+el8.1.0+5256+4b9ab730, netcf-libs 0.2.8-12.module+el8.1.0+4066+0f1aadab, +37 more Red Hat Enterprise Linux AppStream (v. 8) hivex 1.3.15-7.module+el8.1.0+4066+0f1aadab, nbdkit 1.4.2-5.module+el8.1.0+4066+0f1aadab, netcf 0.2.8-12.module+el8.1.0+4066+0f1aadab, seabios 1.11.1-4.module+el8.1.0+4066+0f1aadab, libiscsi 1.18.0-8.module+el8.1.0+4066+0f1aadab, supermin 5.1.19-9.module+el8.1.0+4066+0f1aadab, +81 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2020:0279
  • Red Hat Enterprise Linux BaseOS (v. 8) perf 4.18.0-147.0.2.el8_1, kernel 4.18.0-147.0.2.el8_1, bpftool 4.18.0-147.0.2.el8_1, kernel-core 4.18.0-147.0.2.el8_1, kernel-tools 4.18.0-147.0.2.el8_1, kpatch-patch-4_18_0-147 1-3.el8_1, +16 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3832
  • Red Hat Enterprise Linux BaseOS E4S (v. 8.0) perf 4.18.0-80.15.1.el8_0, kernel 4.18.0-80.15.1.el8_0, bpftool 4.18.0-80.15.1.el8_0, kernel-core 4.18.0-80.15.1.el8_0, kernel-tools 4.18.0-80.15.1.el8_0, python3-perf 4.18.0-80.15.1.el8_0, +9 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2020:0204
  • Red Hat Enterprise Linux Client (v. 7) perf 3.10.0-1062.4.2.el7, kernel 3.10.0-1062.4.2.el7, qemu-img 1.5.3-167.el7_7.4, qemu-kvm 1.5.3-167.el7_7.4, bpftool 3.10.0-1062.4.2.el7, python-perf 3.10.0-1062.4.2.el7, +6 more Red Hat Enterprise Linux Client Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-1062.4.2.el7 Red Hat Enterprise Linux ComputeNode (v. 7) perf 3.10.0-1062.4.2.el7, kernel 3.10.0-1062.4.2.el7, bpftool 3.10.0-1062.4.2.el7, python-perf 3.10.0-1062.4.2.el7, kernel-tools 3.10.0-1062.4.2.el7, kernel-tools-libs 3.10.0-1062.4.2.el7, +2 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3834
  • Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) perf 3.10.0-862.43.2.el7, kernel 3.10.0-862.43.2.el7, python-perf 3.10.0-862.43.2.el7, kernel-tools 3.10.0-862.43.2.el7, kernel-tools-libs 3.10.0-862.43.2.el7, kernel-abi-whitelists 3.10.0-862.43.2.el7, +1 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3838
show 22 more
  • Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) perf 3.10.0-957.38.2.el7, kernel 3.10.0-957.38.2.el7, bpftool 3.10.0-957.38.2.el7, python-perf 3.10.0-957.38.2.el7, kernel-tools 3.10.0-957.38.2.el7, kernel-tools-libs 3.10.0-957.38.2.el7, +2 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3837
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img 1.5.3-167.el7_7.4, qemu-kvm 1.5.3-167.el7_7.4, qemu-kvm-tools 1.5.3-167.el7_7.4, qemu-kvm-common 1.5.3-167.el7_7.4, kernel-debuginfo-common-x86_64 3.10.0-1062.4.2.el7
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3834
  • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) kernel-debuginfo-common-x86_64 3.10.0-862.43.2.el7
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3838
  • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) qemu-img 1.5.3-160.el7_6.5, qemu-kvm 1.5.3-160.el7_6.5, qemu-kvm-tools 1.5.3-160.el7_6.5, qemu-kvm-common 1.5.3-160.el7_6.5, kernel-debuginfo-common-x86_64 3.10.0-957.38.2.el7
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3837
  • Red Hat Enterprise Linux Desktop (v. 6) perf 2.6.32-754.24.2.el6, kernel 2.6.32-754.24.2.el6, kernel-firmware 2.6.32-754.24.2.el6, kernel-abi-whitelists 2.6.32-754.24.2.el6, kernel-debuginfo-common-i686 2.6.32-754.24.2.el6, kernel-debuginfo-common-x86_64 2.6.32-754.24.2.el6 Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf 2.6.32-754.24.2.el6, kernel-debuginfo-common-i686 2.6.32-754.24.2.el6, kernel-debuginfo-common-x86_64 2.6.32-754.24.2.el6
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3836
  • Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt 3.10.0-1062.4.2.rt56.1028.el7, kernel-rt-kvm 3.10.0-1062.4.2.rt56.1028.el7, kernel-rt-trace 3.10.0-1062.4.2.rt56.1028.el7, kernel-rt-debug-kvm 3.10.0-1062.4.2.rt56.1028.el7, kernel-rt-trace-kvm 3.10.0-1062.4.2.rt56.1028.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-1062.4.2.rt56.1028.el7
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3835
  • Red Hat Enterprise Linux HPC Node (v. 6) perf 2.6.32-754.24.2.el6, kernel 2.6.32-754.24.2.el6, kernel-firmware 2.6.32-754.24.2.el6, kernel-abi-whitelists 2.6.32-754.24.2.el6, kernel-debuginfo-common-i686 2.6.32-754.24.2.el6, kernel-debuginfo-common-x86_64 2.6.32-754.24.2.el6 Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf 2.6.32-754.24.2.el6, kernel-debuginfo-common-x86_64 2.6.32-754.24.2.el6
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3836
  • Red Hat Enterprise Linux Real Time (v. 8) kernel-rt 4.18.0-147.0.2.rt24.94.el8_1, kernel-rt-core 4.18.0-147.0.2.rt24.94.el8_1, kernel-rt-modules 4.18.0-147.0.2.rt24.94.el8_1, kernel-rt-debug-core 4.18.0-147.0.2.rt24.94.el8_1, kernel-rt-debug-modules 4.18.0-147.0.2.rt24.94.el8_1, kernel-rt-modules-extra 4.18.0-147.0.2.rt24.94.el8_1, +2 more Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt 4.18.0-147.0.2.rt24.94.el8_1, kernel-rt-kvm 4.18.0-147.0.2.rt24.94.el8_1, kernel-rt-core 4.18.0-147.0.2.rt24.94.el8_1, kernel-rt-modules 4.18.0-147.0.2.rt24.94.el8_1, kernel-rt-debug-kvm 4.18.0-147.0.2.rt24.94.el8_1, kernel-rt-debug-core 4.18.0-147.0.2.rt24.94.el8_1, +4 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3833
  • Red Hat Enterprise Linux Realtime (v. 7) kernel-rt 3.10.0-1062.4.2.rt56.1028.el7, kernel-rt-trace 3.10.0-1062.4.2.rt56.1028.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-1062.4.2.rt56.1028.el7
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3835
  • Red Hat Enterprise Linux Server (v. 6) perf 2.6.32-754.24.2.el6, kernel 2.6.32-754.24.2.el6, kernel-kdump 2.6.32-754.24.2.el6, kernel-firmware 2.6.32-754.24.2.el6, kernel-bootwrapper 2.6.32-754.24.2.el6, kernel-abi-whitelists 2.6.32-754.24.2.el6, +4 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3836
  • Red Hat Enterprise Linux Server (v. 7) perf 3.10.0-1062.4.2.el7, kernel 3.10.0-1062.4.2.el7, qemu-img 1.5.3-167.el7_7.4, qemu-kvm 1.5.3-167.el7_7.4, bpftool 3.10.0-1062.4.2.el7, python-perf 3.10.0-1062.4.2.el7, +15 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3834
  • Red Hat Enterprise Linux Server AUS (v. 6.5) perf 2.6.32-431.96.3.el6, kernel 2.6.32-431.96.3.el6, kernel-firmware 2.6.32-431.96.3.el6, kernel-abi-whitelists 2.6.32-431.96.3.el6, kernel-debuginfo-common-x86_64 2.6.32-431.96.3.el6
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3843
  • Red Hat Enterprise Linux Server AUS (v. 6.6) perf 2.6.32-504.81.3.el6, kernel 2.6.32-504.81.3.el6, kernel-firmware 2.6.32-504.81.3.el6, kernel-abi-whitelists 2.6.32-504.81.3.el6, kernel-debuginfo-common-x86_64 2.6.32-504.81.3.el6
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3842
  • Red Hat Enterprise Linux Server AUS (v. 7.2) perf 3.10.0-327.82.2.el7, kernel 3.10.0-327.82.2.el7, python-perf 3.10.0-327.82.2.el7, kernel-tools 3.10.0-327.82.2.el7, kernel-tools-libs 3.10.0-327.82.2.el7, kernel-abi-whitelists 3.10.0-327.82.2.el7, +1 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3841
  • Red Hat Enterprise Linux Server AUS (v. 7.3) perf 3.10.0-514.70.2.el7, kernel 3.10.0-514.70.2.el7, python-perf 3.10.0-514.70.2.el7, kernel-tools 3.10.0-514.70.2.el7, kernel-tools-libs 3.10.0-514.70.2.el7, kernel-abi-whitelists 3.10.0-514.70.2.el7, +1 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3840
  • Red Hat Enterprise Linux Server AUS (v. 7.4) perf 3.10.0-693.60.2.el7, kernel 3.10.0-693.60.2.el7, python-perf 3.10.0-693.60.2.el7, kernel-tools 3.10.0-693.60.2.el7, kernel-tools-libs 3.10.0-693.60.2.el7, kernel-abi-whitelists 3.10.0-693.60.2.el7, +1 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3839
  • Red Hat Enterprise Linux Server E4S (v. 7.2) perf 3.10.0-327.82.2.el7, kernel 3.10.0-327.82.2.el7, python-perf 3.10.0-327.82.2.el7, kernel-tools 3.10.0-327.82.2.el7, kernel-tools-libs 3.10.0-327.82.2.el7, kernel-abi-whitelists 3.10.0-327.82.2.el7, +1 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3841
  • Red Hat Enterprise Linux Server E4S (v. 7.3) perf 3.10.0-514.70.2.el7, kernel 3.10.0-514.70.2.el7, python-perf 3.10.0-514.70.2.el7, kernel-tools 3.10.0-514.70.2.el7, kernel-tools-libs 3.10.0-514.70.2.el7, kernel-bootwrapper 3.10.0-514.70.2.el7, +3 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3840
  • Red Hat Enterprise Linux Server E4S (v. 7.4) perf 3.10.0-693.60.2.el7, kernel 3.10.0-693.60.2.el7, python-perf 3.10.0-693.60.2.el7, kernel-tools 3.10.0-693.60.2.el7, kernel-tools-libs 3.10.0-693.60.2.el7, kernel-bootwrapper 3.10.0-693.60.2.el7, +3 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3839
  • Red Hat Enterprise Linux Server EUS (v. 7.5) perf 3.10.0-862.43.2.el7, kernel 3.10.0-862.43.2.el7, python-perf 3.10.0-862.43.2.el7, kernel-kdump 3.10.0-862.43.2.el7, kernel-tools 3.10.0-862.43.2.el7, kernel-tools-libs 3.10.0-862.43.2.el7, +6 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3838
  • Red Hat Enterprise Linux Server EUS (v. 7.6) perf 3.10.0-957.38.2.el7, kernel 3.10.0-957.38.2.el7, qemu-img 1.5.3-160.el7_6.5, qemu-kvm 1.5.3-160.el7_6.5, bpftool 3.10.0-957.38.2.el7, python-perf 3.10.0-957.38.2.el7, +14 more
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3837
  • Red Hat Enterprise Linux Server Optional (v. 6) python-perf 2.6.32-754.24.2.el6, kernel-debuginfo-common-i686 2.6.32-754.24.2.el6, kernel-debuginfo-common-ppc64 2.6.32-754.24.2.el6, kernel-debuginfo-common-s390x 2.6.32-754.24.2.el6, kernel-debuginfo-common-x86_64 2.6.32-754.24.2.el6
    fixed: vendor fix “For mitigation related information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/tsx-asynchronousabort” RHSA-2019:3836

26 more fixed, 5 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
5mo ago

Exploit prediction

3.13% chance of exploitation in the next 30 days, higher than 87% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CISA ADP 3.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
NVD 3.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CNA 3.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
NVD 2.0 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • n/a 2019.2 IPU – TSX Asynchronous Abort

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.