Insufficient access control in the Linux kernel driver for some Intel(R)
Processors may allow an authenticated user to potentially enable
information disclosure via local access.

Moritz Lipp, Michael Schwarz, Andreas Kogler, David Oswald, Catherine
Easdon, Claudio Canella, and Daniel Gruss discovered that the Intel Running
Average Power Limit (RAPL) driver in the Linux kernel did not properly
restrict access to power data. A local attacker could possibly use this to
expose sensitive information.

Restrict permissions on the affected sysfs entries:

$ sudo find /sys/devices/virtual/powercap/ -name energy_uj -exec chmod 400 {} \;

sbeattie

fix will be to adjust the access control bits on the RAPL sysfs files.