CVE-2019-11135: Canonical Ubuntu Linux

Medium severity, CVSS 6.5. EPSS: 3.1% chance of exploitation in the next 30 days.

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

Affected products

• Canonical Ubuntu Linux: version 14.04 only
• Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
• Fedoraproject Fedora: version 30 only; version 31 only
• HP Apollo 2000 Firmware: before 2.20 (fixed in 2.20)
• HP Apollo 4200 Firmware: before 2.20 (fixed in 2.20)
• HP Proliant BL460C Firmware: before 2.20 (fixed in 2.20)
• HP Proliant DL120 Firmware: before 2.20 (fixed in 2.20)
• HP Proliant DL160 Firmware: before 2.20 (fixed in 2.20)
• HP Proliant DL180 Firmware: before 2.20 (fixed in 2.20)
• HP Proliant DL20 Firmware: before 2.10 (fixed in 2.10)
• HP Proliant DL360 Firmware: before 2.20 (fixed in 2.20)
• HP Proliant DL380 Firmware: before 2.20 (fixed in 2.20)
• HP Proliant DL560 Firmware: before 2.20 (fixed in 2.20)
• HP Proliant DL580 Firmware: before 2.20 (fixed in 2.20)
• HP Proliant e910 Firmware: before 2.20 (fixed in 2.20)
• HP Proliant ML110 Firmware: before 2.20 (fixed in 2.20)
• HP Proliant ML30 Firmware: before 2.10 (fixed in 2.10)
• HP Proliant ML350 Firmware: before 2.20 (fixed in 2.20)
• HP Proliant XL170R Firmware: before 2.20 (fixed in 2.20)
• HP Proliant XL190R Firmware: before 2.20 (fixed in 2.20)
• HP Proliant XL230K Firmware: before 2.20 (fixed in 2.20)
• HP Proliant XL270D Firmware: before 2.20 (fixed in 2.20)
• HP Proliant XL450 Firmware: before 2.20 (fixed in 2.20)
• HP Synergy 480 Firmware: before 2.20 (fixed in 2.20)
• HP Synergy 660 Firmware: before 2.20 (fixed in 2.20)
• and 135 more

Published 2019-11-14. Last modified 2026-06-17.