Skip to content
OpenAdvisories
Medium USN-3540-1 3 CVEs

linux, linux-aws, linux-euclid vulnerabilities

Published Jan 23, 2018 · Updated May 29, 2026

Summary

Jann Horn discovered that microprocessors utilizing speculative
execution and branch prediction may allow unauthorized memory
reads via sidechannel attacks. This flaw is known as Spectre. A
local attacker could use this to expose sensitive information,
including kernel memory. This update provides mitigations for the
i386 (CVE-2017-5753 only), amd64, ppc64el, and s390x architectures.
(CVE-2017-5715, CVE-2017-5753)

USN-3522-1 mitigated CVE-2017-5754 (Meltdown) for the amd64
architecture in Ubuntu 16.04 LTS. This update provides the
corresponding mitigations for the ppc64el architecture. Original
advisory details:

Jann Horn discovered that microprocessors utilizing speculative
execution and indirect branch prediction may allow unauthorized memory
reads via sidechannel attacks. This flaw is known as Meltdown. A local
attacker could use this to expose sensitive information, including
kernel memory. (CVE-2017-5754)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS linux 4.4.0-112.135
Ubuntu · 16.04 LTS 16.04:LTS linux-aws 4.4.0-1049.58
Ubuntu · 16.04 LTS 16.04:LTS linux-euclid 4.4.0-9023.24

Vulnerabilities 3

References

  • report
    https://ubuntu.com/security/CVE-2017-5715
  • report
    https://ubuntu.com/security/CVE-2017-5753
  • report
    https://ubuntu.com/security/CVE-2017-5754