VDB

ALPINE-CVE-2019-11135

ALPINE-CVE-2019-11135 PUBLISHED CVSS 6.5 MEDIUM

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected Products

VendorProductVersions
Alpine:v3.21intel-ucode20180312-r0, 20190514a-r0, 20180807a-r2
Alpine:v3.13intel-ucode0, 20190618-r0, 20190514a-r0
Alpine:v3.13xen4.2.0-r1, 4.2.0-r2, 4.2.0-r3
Alpine:v3.22intel-ucode20170511-r0, 20130222-r0, 0
Alpine:v3.15xen4.7.1-r4, 4.9.0-r6, 4.9.0-r5
Alpine:v3.19intel-ucode20191112-r0, 20130222-r0, 0
Alpine:v3.17intel-ucode0, 20130222-r0, 20170511-r0
Alpine:v3.9xen4.9.1-r0, 4.2.0-r6, 4.1.2-r5
Alpine:v3.12xen4.1.1-r2, 4.1.2-r11, 4.1.2-r12
Alpine:v3.17xen4.2.1-r10, 4.2.1-r0, 4.2.0-r5
Alpine:v3.21xen4.2.1-r10, 4.1.0-r0, 4.1.0-r1
Alpine:v3.18intel-ucode20180312-r0, 20180807a-r0, 20180807a-r1
Alpine:v3.15intel-ucode20170511-r0, 20180108-r0, 20180312-r0
Alpine:v3.14intel-ucode20190514a-r0, 20190918-r0, 0
Alpine:v3.16intel-ucode*, 0, 20130222-r0
Alpine:v3.22xen4.3.0-r8, 4.9.1-r3, 4.9.1-r2
Alpine:v3.19xen4.1.1-r0, 4.0.1-r0, 4.0.1-r1
Alpine:v3.10xen4.5.0-r0, 0, 4.0.1-r2
Alpine:v3.11xen4.2.2-r10, 4.2.2-r2, 4.2.2-r3
Alpine:v3.8xen4.2.1-r4, 4.7.1-r5, 0

…and 7 more

Timeline

  • Nov 14, 2019 CVE Published
  • Dec 3, 2025 CVE Updated
  • Apr 30, 2026 Distribution Patch
Open in Interactive Console →
$ Console Community · 100/wk Open console ›