Description

The product provides software-controllable
device functionality for capabilities such as power and
clock management, but it does not properly limit
functionality that can lead to modification of
hardware memory or register bits, or the ability to
observe physical side channels.

Modes of Introduction:

– Architecture and Design

Related Weaknesses

CWE-285

Consequences

Integrity: Modify Memory, Modify Application Data, Bypass Protection Mechanism

Potential Mitigations

Phase: Architecture and Design, Implementation

Description: 

CVE References

• CVE-2019-11157
  • Plundervolt: Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege and/or information disclosure via local access [REF-1081].

• CVE-2020-8694
  • PLATYPUS Attack: Insufficient access control in the Linux kernel driver for some Intel processors allows information disclosure.

• CVE-2020-8695
  • Observable discrepancy in the RAPL interface for some Intel processors allows information disclosure.

• CVE-2020-12912
  • AMD extension to a Linux service does not require privileged access to the RAPL interface, allowing side-channel attacks.

• CVE-2015-0565
  • NaCl in 2015 allowed the CLFLUSH instruction, making Rowhammer attacks possible.