CVE-2020-12912

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-749 CWE-203

Affected software

No affected versions have been published.

Timeline

Published: Nov 12, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-12927.8An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings, a CVE-2020-129205.5A potential denial of service issue exists in the AMD Display driver Escape 0x130007 Call handler. An attacker with low privilege could pote CVE-2020-129266.4The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happens. This can leave t CVE-2020-129277.8A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privil CVE-2020-129287.8A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT aut CVE-2020-129297.8Improper parameters validation in some trusted applications of the PSP contained in the AMD Graphics Driver may allow a local attacker to by CVE-2020-12937.8An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'CVE-2020-129307.8Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially l CVE-2020-129317.8Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentiall CVE-2020-129335.5A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A s CVE-2020-12947.8An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi CVE-2020-129447.8Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.