Summary
Daniël Trujillo, Johannes Wikner, and Kaveh Razavi discovered that some AMD
processors utilising speculative execution and branch prediction may allow
unauthorised memory reads via a speculative side-channel attack. A local
attacker could use this to expose sensitive information, including kernel
memory.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | amd64-microcode | 3.20191218.1ubuntu1.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | amd64-microcode | 3.20191218.1ubuntu2.2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | amd64-microcode | 3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | amd64-microcode | 3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm2 |
Vulnerabilities 1
-
Unscored —
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. …
References
-
report
https://ubuntu.com/security/CVE-2023-20569