Summary
Jann Horn discovered that microprocessors utilizing speculative execution
and indirect branch prediction may allow unauthorized memory reads via
sidechannel attacks. This flaw is known as Meltdown. A local attacker could
use this to expose sensitive information, including kernel memory.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux | 4.4.0-108.131 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws | 4.4.0-1047.56 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-euclid | 4.4.0-9021.22 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-kvm | 4.4.0-1015.20 |
Vulnerabilities 1
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…
References
-
report
https://ubuntu.com/security/CVE-2017-5754