Skip to content
Fencer Vulns
medium 5.6

CVE-2019-11091 json

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may…

published 2019-05-30 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-2795

cvss
5.6
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 49%
public exploits
0
none known

Summary

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Patch / fix

  • xen Debian 14, Debian 13, Debian 12 4.11.1+92-g6c33308a8d-1
  • linux Debian 14, Debian 13, Debian 12 4.19.37-2
  • intel-microcode Debian 14, Debian 13, Debian 12 3.20190514.1

debian advisories DEBIAN-CVE-2019-11091

  • qemu Ubuntu 14.04 LTS 2.0.0+dfsg-2ubuntu1.46
  • qemu Ubuntu 16.04 LTS 1:2.5+dfsg-5ubuntu10.38
  • qemu Ubuntu 18.04 LTS 1:2.11+dfsg-1ubuntu7.13
  • linux Ubuntu 14.04 LTS 3.13.0-170.220
  • linux Ubuntu 16.04 LTS 4.4.0-148.174
  • linux Ubuntu 18.04 LTS 4.15.0-50.54
  • libvirt Ubuntu 14.04 LTS 1.2.2-0ubuntu13.1.28
  • libvirt Ubuntu 16.04 LTS 1.3.1-1ubuntu10.26

ubuntu advisories UBUNTU-CVE-2019-11091

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • kernel RHEL 8 4.18.0-80.1.2.el8_0
  • perf RHEL 8 4.18.0-80.1.2.el8_0
  • bpftool RHEL 8 4.18.0-80.1.2.el8_0
  • kernel-core RHEL 8 4.18.0-80.1.2.el8_0
  • kernel-tools RHEL 8 4.18.0-80.1.2.el8_0
  • python3-perf RHEL 8 4.18.0-80.1.2.el8_0
  • kernel-modules RHEL 8 4.18.0-80.1.2.el8_0
  • kernel-zfcpdump RHEL 8 4.18.0-80.1.2.el8_0

red hat advisories RHSA-2019:1167RHSA-2019:2553RHSA-2019:1455RHSA-2019:1208RHSA-2019:1209RHSA-2019:1207

  • kernel-syms SLES for SAP 12 SP2, SLES 12 SP2-LTSS, SLES 12 SP2-BCL +1 more 4.4.121-92.129.1
  • kernel-source SLES for SAP 12 SP2, SLES 12 SP2-LTSS, SLES 12 SP2-BCL +1 more 4.4.121-92.129.1
  • kernel-default SLES for SAP 12 SP2, SLES 12 SP2-LTSS, SLES 12 SP2-BCL +2 more 4.4.121-92.129.1
  • kgraft-patch-SLE12-SP2_Update_34 SLES for SAP 12 SP2, SLES 12 SP2-LTSS, OpenStack Cloud 7 1-3.3.1
  • kernel-syms SLES for SAP 12 SP3, SLES 12 SP3-LTSS, SLES 12 SP3-BCL +4 more 4.4.180-94.116.1
  • kernel-source SLES for SAP 12 SP3, SLES 12 SP3-LTSS, SLES 12 SP3-BCL +4 more 4.4.180-94.116.1
  • kernel-default SLES for SAP 12 SP3, SLES 12 SP3-LTSS, SLES 12 SP3-BCL +5 more 4.4.180-94.116.1
  • kgraft-patch-SLE12-SP3_Update_31 SLES for SAP 12 SP3, SLES 12 SP3-LTSS, OpenStack Cloud Crowbar 8 +3 more 1-4.3.1

suse advisories SUSE-SU-2020:1255-1SUSE-SU-2020:1275-1SUSE-SU-2019:2769-1SUSE-RU-2019:2767-1SUSE-SU-2019:2753-1SUSE-RU-2019:2715-1

  • ucode-intel openSUSE Leap 15.1 20190618-lp151.2.3.1
  • ucode-intel openSUSE Leap 15.0 20190618-lp150.2.24.1
  • libvirt openSUSE Leap 15.0 4.0.0-lp150.7.14.1
  • ucode-intel openSUSE Leap 15.0 20190514-lp150.2.21.1
  • qemu openSUSE Leap 15.0 2.11.2-lp150.7.22.1
  • kernel-syms openSUSE Leap 15.0 4.12.14-lp150.12.61.1
  • kernel-obs-qa openSUSE Leap 15.0 4.12.14-lp150.12.61.1
  • kernel-source openSUSE Leap 15.0 4.12.14-lp150.12.61.1

opensuse advisories openSUSE-SU-2019:1806-1openSUSE-SU-2019:1805-1openSUSE-SU-2019:1505-1openSUSE-SU-2019:1468-1openSUSE-SU-2019:1405-1openSUSE-SU-2019:1404-1

  • xen Alpine 3.24, Alpine 3.23, Alpine 3.22 +12 more 4.12.0-r2
  • xen Alpine 3.7 4.9.4-r1
  • xen Alpine 3.8 4.10.3-r1
  • xen Alpine 3.9 4.11.1-r2

alpine advisories ALPINE-CVE-2019-11091

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2019-11091 updated cvss 3.8

hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

  • Red Hat Enterprise Linux 5 kernel
    affected: no fix planned “Will not fix”
  • Red Hat Virtualization 4 ovirt-guest-agent-common, ovirt-guest-agent-gdm-plugin, ovirt-guest-agent-pam-module
    affected: no fix available
  • Red Hat CodeReady Linux Builder (v. 8) kernel-debuginfo-common-x86_64 4.18.0-80.1.2.el8_0, kernel-debuginfo-common-aarch64 4.18.0-80.1.2.el8_0, kernel-debuginfo-common-ppc64le 4.18.0-80.1.2.el8_0
    fixed: vendor fix RHSA-2019:1167
  • Red Hat Enterprise Linux 8 Advanced Virtualization hivex 1.3.15-6.module+el8.0.0+3273+6bc1ee54, nbdkit 1.4.2-4.module+el8.0.0+3273+6bc1ee54, netcf 0.2.8-10.module+el8.0.0+3273+6bc1ee54, seabios 1.12.0-1.module+el8.0.0+3273+6bc1ee54, libiscsi 1.18.0-6.module+el8.0.0+3273+6bc1ee54, libssh2 1.8.0-7.module+el8.0.0+3273+6bc1ee54.1, +83 more
    fixed: vendor fix RHSA-2019:1455
  • Red Hat Enterprise Linux AppStream (v. 8) hivex 1.3.15-6.module+el8.0.0+3075+09be6b65, nbdkit 1.4.2-4.module+el8.0.0+3075+09be6b65, netcf 0.2.8-10.module+el8.0.0+3075+09be6b65, seabios 1.11.1-3.module+el8.0.0+3075+09be6b65, libiscsi 1.18.0-6.module+el8.0.0+3075+09be6b65, libssh2 1.8.0-7.module+el8.0.0+3075+09be6b65.1, +82 more
    fixed: vendor fix RHSA-2019:1175
  • Red Hat Enterprise Linux BaseOS (v. 8) perf 4.18.0-80.1.2.el8_0, kernel 4.18.0-80.1.2.el8_0, bpftool 4.18.0-80.1.2.el8_0, kernel-core 4.18.0-80.1.2.el8_0, kernel-tools 4.18.0-80.1.2.el8_0, python3-perf 4.18.0-80.1.2.el8_0, +15 more
    fixed: vendor fix RHSA-2019:1167
  • Red Hat Enterprise Linux Client (v. 7) libvirt 4.5.0-10.el7_6.9, perf 3.10.0-957.12.2.el7, kernel 3.10.0-957.12.2.el7, qemu-img 1.5.3-160.el7_6.2, qemu-kvm 1.5.3-160.el7_6.2, bpftool 3.10.0-957.12.2.el7, +30 more Red Hat Enterprise Linux Client Optional (v. 7) libvirt-nss 4.5.0-10.el7_6.9, libvirt-admin 4.5.0-10.el7_6.9, libvirt-daemon-lxc 4.5.0-10.el7_6.9, libvirt-login-shell 4.5.0-10.el7_6.9, libvirt-lock-sanlock 4.5.0-10.el7_6.9, kernel-debuginfo-common-x86_64 3.10.0-957.12.2.el7 Red Hat Enterprise Linux ComputeNode (v. 7) libvirt 4.5.0-10.el7_6.9, perf 3.10.0-957.12.2.el7, kernel 3.10.0-957.12.2.el7, bpftool 3.10.0-957.12.2.el7, libvirt-libs 4.5.0-10.el7_6.9, libvirt-client 4.5.0-10.el7_6.9, +6 more
    fixed: vendor fix RHSA-2019:1168
  • Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) perf 3.10.0-693.47.2.el7, libvirt 3.2.0-14.el7_4.13, kernel 3.10.0-693.47.2.el7, libvirt-libs 3.2.0-14.el7_4.13, python-perf 3.10.0-693.47.2.el7, kernel-tools 3.10.0-693.47.2.el7, +4 more
    fixed: vendor fix RHSA-2019:1170
show 26 more
  • Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) libvirt 3.9.0-14.el7_5.9, perf 3.10.0-862.32.2.el7, kernel 3.10.0-862.32.2.el7, libvirt-libs 3.9.0-14.el7_5.9, libvirt-client 3.9.0-14.el7_5.9, python-perf 3.10.0-862.32.2.el7, +4 more
    fixed: vendor fix RHSA-2019:1155
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7) libvirt 4.5.0-10.el7_6.9, qemu-img 1.5.3-160.el7_6.2, qemu-kvm 1.5.3-160.el7_6.2, libvirt-nss 4.5.0-10.el7_6.9, libvirt-admin 4.5.0-10.el7_6.9, libvirt-daemon 4.5.0-10.el7_6.9, +25 more
    fixed: vendor fix RHSA-2019:1168
  • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) libvirt 3.2.0-14.el7_4.13, qemu-img 1.5.3-141.el7_4.10, qemu-kvm 1.5.3-141.el7_4.10, libvirt-nss 3.2.0-14.el7_4.13, libvirt-admin 3.2.0-14.el7_4.13, libvirt-daemon 3.2.0-14.el7_4.13, +25 more
    fixed: vendor fix RHSA-2019:1170
  • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) libvirt 3.9.0-14.el7_5.9, qemu-img 1.5.3-156.el7_5.7, qemu-kvm 1.5.3-156.el7_5.7, libvirt-nss 3.9.0-14.el7_5.9, libvirt-admin 3.9.0-14.el7_5.9, libvirt-daemon 3.9.0-14.el7_5.9, +25 more
    fixed: vendor fix RHSA-2019:1155
  • Red Hat Enterprise Linux Desktop (v. 6) perf 2.6.32-754.14.2.el6, kernel 2.6.32-754.14.2.el6, libvirt 0.10.2-64.el6_10.1, qemu-img 0.12.1.2-2.506.el6_10.3, qemu-kvm 0.12.1.2-2.506.el6_10.3, libvirt-client 0.10.2-64.el6_10.1, +7 more Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf 2.6.32-754.14.2.el6, libvirt-lock-sanlock 0.10.2-64.el6_10.1, kernel-debuginfo-common-i686 2.6.32-754.14.2.el6, kernel-debuginfo-common-x86_64 2.6.32-754.14.2.el6
    fixed: vendor fix RHSA-2019:1169
  • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libvirt 4.5.0-10.el7_6.9, libvirt-libs 4.5.0-10.el7_6.9, libvirt-client 4.5.0-10.el7_6.9, libvirt-daemon 4.5.0-10.el7_6.9, libvirt-daemon-kvm 4.5.0-10.el7_6.9, libvirt-bash-completion 4.5.0-10.el7_6.9, +16 more Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libvirt 4.5.0-10.el7_6.9, libvirt-nss 4.5.0-10.el7_6.9, libvirt-libs 4.5.0-10.el7_6.9, libvirt-admin 4.5.0-10.el7_6.9, libvirt-client 4.5.0-10.el7_6.9, libvirt-daemon 4.5.0-10.el7_6.9, +21 more
    fixed: vendor fix RHSA-2019:1177
  • Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt 3.10.0-957.12.2.rt56.929.el7, kernel-rt-kvm 3.10.0-957.12.2.rt56.929.el7, kernel-rt-trace 3.10.0-957.12.2.rt56.929.el7, kernel-rt-debug-kvm 3.10.0-957.12.2.rt56.929.el7, kernel-rt-trace-kvm 3.10.0-957.12.2.rt56.929.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-957.12.2.rt56.929.el7
    fixed: vendor fix RHSA-2019:1176
  • Red Hat Enterprise Linux HPC Node (v. 6) perf 2.6.32-754.14.2.el6, kernel 2.6.32-754.14.2.el6, libvirt 0.10.2-64.el6_10.1, qemu-img 0.12.1.2-2.506.el6_10.3, qemu-kvm 0.12.1.2-2.506.el6_10.3, libvirt-client 0.10.2-64.el6_10.1, +7 more Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf 2.6.32-754.14.2.el6, libvirt-lock-sanlock 0.10.2-64.el6_10.1, kernel-debuginfo-common-x86_64 2.6.32-754.14.2.el6
    fixed: vendor fix RHSA-2019:1169
  • Red Hat Enterprise Linux Real Time (v. 8) kernel-rt 4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-core 4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-modules 4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-debug-core 4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-debug-modules 4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-modules-extra 4.18.0-80.1.2.rt9.145.el8_0, +2 more Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt 4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-kvm 4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-core 4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-modules 4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-debug-kvm 4.18.0-80.1.2.rt9.145.el8_0, kernel-rt-debug-core 4.18.0-80.1.2.rt9.145.el8_0, +4 more
    fixed: vendor fix RHSA-2019:1174
  • Red Hat Enterprise Linux Realtime (v. 7) kernel-rt 3.10.0-957.12.2.rt56.929.el7, kernel-rt-trace 3.10.0-957.12.2.rt56.929.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-957.12.2.rt56.929.el7
    fixed: vendor fix RHSA-2019:1176
  • Red Hat Enterprise Linux Server (v. 6) perf 2.6.32-754.14.2.el6, kernel 2.6.32-754.14.2.el6, libvirt 0.10.2-64.el6_10.1, kernel-kdump 2.6.32-754.14.2.el6, qemu-img 0.12.1.2-2.506.el6_10.3, qemu-kvm 0.12.1.2-2.506.el6_10.3, +11 more
    fixed: vendor fix RHSA-2019:1169
  • Red Hat Enterprise Linux Server (v. 7) libvirt 4.5.0-10.el7_6.9, perf 3.10.0-957.12.2.el7, kernel 3.10.0-957.12.2.el7, qemu-img 1.5.3-160.el7_6.2, qemu-kvm 1.5.3-160.el7_6.2, bpftool 3.10.0-957.12.2.el7, +35 more
    fixed: vendor fix RHSA-2019:1168
  • Red Hat Enterprise Linux Server AUS (v. 6.5) perf 2.6.32-431.94.2.el6, kernel 2.6.32-431.94.2.el6, libvirt 0.10.2-29.el6_5.18, qemu-img 0.12.1.2-2.415.el6_5.20, qemu-kvm 0.12.1.2-2.415.el6_5.20, libvirt-client 0.10.2-29.el6_5.18, +6 more
    fixed: vendor fix RHSA-2019:1196
  • Red Hat Enterprise Linux Server AUS (v. 6.6) perf 2.6.32-504.78.2.el6, kernel 2.6.32-504.78.2.el6, libvirt 0.10.2-46.el6_6.10, qemu-img 0.12.1.2-2.448.el6_6.8, qemu-kvm 0.12.1.2-2.448.el6_6.8, libvirt-client 0.10.2-46.el6_6.10, +6 more
    fixed: vendor fix RHSA-2019:1193
  • Red Hat Enterprise Linux Server AUS (v. 7.2) perf 3.10.0-327.78.2.el7, kernel 3.10.0-327.78.2.el7, libvirt 1.2.17-13.el7_2.10, qemu-img 1.5.3-105.el7_2.19, qemu-kvm 1.5.3-105.el7_2.19, libcacard 1.5.3-105.el7_2.19, +20 more
    fixed: vendor fix RHSA-2019:1172
  • Red Hat Enterprise Linux Server AUS (v. 7.3) perf 3.10.0-514.64.2.el7, libvirt 2.0.0-10.el7_3.14, kernel 3.10.0-514.64.2.el7, qemu-img 1.5.3-126.el7_3.17, qemu-kvm 1.5.3-126.el7_3.17, python-perf 3.10.0-514.64.2.el7, +19 more
    fixed: vendor fix RHSA-2019:1171
  • Red Hat Enterprise Linux Server E4S (v. 7.2) perf 3.10.0-327.78.2.el7, kernel 3.10.0-327.78.2.el7, libvirt 1.2.17-13.el7_2.10, qemu-img 1.5.3-105.el7_2.19, qemu-kvm 1.5.3-105.el7_2.19, libcacard 1.5.3-105.el7_2.19, +20 more
    fixed: vendor fix RHSA-2019:1172
  • Red Hat Enterprise Linux Server E4S (v. 7.3) perf 3.10.0-514.64.2.el7, libvirt 2.0.0-10.el7_3.14, kernel 3.10.0-514.64.2.el7, qemu-img 1.5.3-126.el7_3.17, qemu-kvm 1.5.3-126.el7_3.17, python-perf 3.10.0-514.64.2.el7, +21 more
    fixed: vendor fix RHSA-2019:1171
  • Red Hat Enterprise Linux Server EUS (v. 7.4) perf 3.10.0-693.47.2.el7, libvirt 3.2.0-14.el7_4.13, kernel 3.10.0-693.47.2.el7, qemu-img 1.5.3-141.el7_4.10, qemu-kvm 1.5.3-141.el7_4.10, libvirt-libs 3.2.0-14.el7_4.13, +33 more
    fixed: vendor fix RHSA-2019:1170
  • Red Hat Enterprise Linux Server EUS (v. 7.5) libvirt 3.9.0-14.el7_5.9, perf 3.10.0-862.32.2.el7, kernel 3.10.0-862.32.2.el7, qemu-img 1.5.3-156.el7_5.7, qemu-kvm 1.5.3-156.el7_5.7, libvirt-libs 3.9.0-14.el7_5.9, +33 more
    fixed: vendor fix RHSA-2019:1155
  • Red Hat Enterprise Linux Server Optional (v. 6) python-perf 2.6.32-754.14.2.el6, libvirt-lock-sanlock 0.10.2-64.el6_10.1, kernel-debuginfo-common-i686 2.6.32-754.14.2.el6, kernel-debuginfo-common-ppc64 2.6.32-754.14.2.el6, kernel-debuginfo-common-s390x 2.6.32-754.14.2.el6, kernel-debuginfo-common-x86_64 2.6.32-754.14.2.el6
    fixed: vendor fix RHSA-2019:1169
  • Red Hat Enterprise Linux Server Optional (v. 7) libvirt-nss 4.5.0-10.el7_6.9, libvirt-admin 4.5.0-10.el7_6.9, libvirt-daemon-lxc 4.5.0-10.el7_6.9, libvirt-login-shell 4.5.0-10.el7_6.9, libvirt-lock-sanlock 4.5.0-10.el7_6.9, kernel-debuginfo-common-ppc64 3.10.0-957.12.2.el7, +2 more
    fixed: vendor fix RHSA-2019:1168
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.5) kernel 2.6.32-431.94.2.el6, libvirt 0.10.2-29.el6_5.18, python-perf 2.6.32-431.94.2.el6, libvirt-lock-sanlock 0.10.2-29.el6_5.18, kernel-debuginfo-common-x86_64 2.6.32-431.94.2.el6
    fixed: vendor fix RHSA-2019:1196
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.6) python-perf 2.6.32-504.78.2.el6, libvirt-lock-sanlock 0.10.2-46.el6_6.10, kernel-debuginfo-common-x86_64 2.6.32-504.78.2.el6
    fixed: vendor fix RHSA-2019:1193
  • Red Hat Enterprise Linux Server Optional AUS (v. 7.2) libcacard-tools 1.5.3-105.el7_2.19, libvirt-daemon-lxc 1.2.17-13.el7_2.10, libvirt-login-shell 1.2.17-13.el7_2.10, libvirt-lock-sanlock 1.2.17-13.el7_2.10, kernel-debuginfo-common-x86_64 3.10.0-327.78.2.el7
    fixed: vendor fix RHSA-2019:1172
  • Red Hat Enterprise Linux Server Optional AUS (v. 7.3) libvirt-nss 2.0.0-10.el7_3.14, libvirt-daemon-lxc 2.0.0-10.el7_3.14, libvirt-login-shell 2.0.0-10.el7_3.14, libvirt-lock-sanlock 2.0.0-10.el7_3.14, kernel-debuginfo-common-x86_64 3.10.0-514.64.2.el7
    fixed: vendor fix RHSA-2019:1171

24 more fixed, 1 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
5 mo ago

Exploit prediction

0.61% chance of exploitation in the next 30 days, higher than 49% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CNA 3.1 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
NVD 3.0 5.6 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
NVD 2.0 4.7 AV:L/AC:M/Au:N/C:C/I:N/A:N

Affected products

  • Intel Corporation Central Processing Units (CPUs)

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.