K34425791 : Intel processor vulnerabilities CVE-2019-0151, CVE-2019-0152

Security Advisory Description

• CVE-2019-0151

Insufficient memory protection in Intel® TXT for certain Intel® Core Processors and Intel® Xeon® Processors may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2019-0152

Insufficient memory protection in System Management Mode (SMM) and Intel® TXT for certain Intel® Xeon® Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Impact

There is no impact; F5 products are not affected by this vulnerability.
However, in cloud and Virtual Edition (VE) environments, preventing these attacks falls on the hypervisor/host platform, outside the scope of F5’s ability to support or patch. Please contact your cloud provider or hypervisor vendor to ensure their platforms or products are not subject to this vulnerability.