Summary
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-22.24 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1009.9 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure | 4.15.0-1012.12 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp | 4.15.0-1008.8 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1010.10 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oem | 4.15.0-1006.9 |
Vulnerabilities 1
-
Medium 5.5
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addre…
References
-
report
https://ubuntu.com/security/CVE-2018-3639