CVE ID:	CVE-2019-5489
Description:	The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2019.1221   1.3.6.1.4.1.25623.1.0.891823   1.3.6.1.4.1.25623.1.0.891824   1.3.6.1.4.1.25623.1.0.704465
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-5489 BugTraq ID: 106478 http://www.securityfocus.com/bid/106478 Bugtraq: 20190618 [SECURITY] [DSA 4465-1] linux security update (Google Search) https://seclists.org/bugtraq/2019/Jun/26 http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-pagecache-en https://security.netapp.com/advisory/ntap-20190307-0001/ Debian Security Information: DSA-4465 (Google Search) https://www.debian.org/security/2019/dsa-4465 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=574823bfab82d9d8fa47f422778043fbb4b4f50e http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=574823bfab82d9d8fa47f422778043fbb4b4f50e https://arxiv.org/abs/1901.01161 https://arxiv.org/abs/1901.01161 https://bugzilla.suse.com/show_bug.cgi?id=1120843 https://bugzilla.suse.com/show_bug.cgi?id=1120843 https://github.com/torvalds/linux/commit/574823bfab82d9d8fa47f422778043fbb4b4f50e https://github.com/torvalds/linux/commit/574823bfab82d9d8fa47f422778043fbb4b4f50e https://www.oracle.com/security-alerts/cpujul2020.html https://www.oracle.com/security-alerts/cpujul2020.html https://www.theregister.co.uk/2019/01/05/boffins_beat_page_cache/ https://www.theregister.co.uk/2019/01/05/boffins_beat_page_cache/ https://lists.debian.org/debian-lts-announce/2019/06/msg00010.html https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html RedHat Security Advisories: RHSA-2019:2029 https://access.redhat.com/errata/RHSA-2019:2029 RedHat Security Advisories: RHSA-2019:2043 https://access.redhat.com/errata/RHSA-2019:2043 RedHat Security Advisories: RHSA-2019:2473 https://access.redhat.com/errata/RHSA-2019:2473 RedHat Security Advisories: RHSA-2019:2808 https://access.redhat.com/errata/RHSA-2019:2808 RedHat Security Advisories: RHSA-2019:2809 https://access.redhat.com/errata/RHSA-2019:2809 RedHat Security Advisories: RHSA-2019:2837 https://access.redhat.com/errata/RHSA-2019:2837 RedHat Security Advisories: RHSA-2019:3309 https://access.redhat.com/errata/RHSA-2019:3309 RedHat Security Advisories: RHSA-2019:3517 https://access.redhat.com/errata/RHSA-2019:3517 RedHat Security Advisories: RHSA-2019:3967 https://access.redhat.com/errata/RHSA-2019:3967 RedHat Security Advisories: RHSA-2019:4056 https://access.redhat.com/errata/RHSA-2019:4056 RedHat Security Advisories: RHSA-2019:4057 https://access.redhat.com/errata/RHSA-2019:4057 RedHat Security Advisories: RHSA-2019:4058 https://access.redhat.com/errata/RHSA-2019:4058 RedHat Security Advisories: RHSA-2019:4159 https://access.redhat.com/errata/RHSA-2019:4159 RedHat Security Advisories: RHSA-2019:4164 https://access.redhat.com/errata/RHSA-2019:4164 RedHat Security Advisories: RHSA-2019:4255 https://access.redhat.com/errata/RHSA-2019:4255 RedHat Security Advisories: RHSA-2020:0204 https://access.redhat.com/errata/RHSA-2020:0204 SuSE Security Announcement: openSUSE-SU-2019:1479 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html SuSE Security Announcement: openSUSE-SU-2019:1570 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html SuSE Security Announcement: openSUSE-SU-2019:1579 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html