Summary
Jann Horn discovered that microprocessors utilizing speculative execution
and branch prediction may allow unauthorized memory reads via sidechannel
attacks. This flaw is known as Spectre. A local attacker could use this to
expose sensitive information, including kernel memory. (CVE-2017-5715)
This update provides the corrected microcode updates required for the
corresponding Linux kernel updates.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | intel-microcode | 3.20180312.0~ubuntu14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | intel-microcode | 3.20180312.0~ubuntu16.04.1 |
Vulnerabilities 1
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…
References
-
report
https://ubuntu.com/security/CVE-2017-5715