Alerts This Week
Warning Icon 1 1,149
Alerts This Week
Warning Icon 1 1,149

SUSE: 2020:1595-1 Moderate: ucode-intel Microcode Attack Fixes

suse
Calendar Grey June 10, 2020
Dist Suse Esm H88
Critical patch released for ucode-amd mitigates several risks with moderate impact on different SUSE platforms.
An update that fixes three vulnerabilities is now available

Summary

This update for ucode-intel fixes the following issues: Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466) This update contains security mitigations for: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it. This attack is known as Special Register Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824). - CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to mitigate the Vector Register and L1D Eviction Sampling aka "CacheOutAttack" attacks. (bsc#1156353) Microcode Table: Processor Identifier Version Products Model Stepping F-MO-S/PI Old->New

Topics%20covered

Topics Covered

security advisory moderate severity microcode update SUSE Linux Enterprise SUSE OpenStack side channel CacheOutAttack

References

#1154824 #1156353 #1172466

Cross- CVE-2020-0543 CVE-2020-0548 CVE-2020-0549

Affected Products:

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud 8

SUSE OpenStack Cloud 7

SUSE Linux Enterprise Server for SAP 12-SP3

SUSE Linux Enterprise Server for SAP 12-SP2

SUSE Linux Enterprise Server 12-SP4

SUSE Linux Enterprise Server 12-SP3-LTSS

SUSE Linux Enterprise Server 12-SP3-BCL

SUSE Linux Enterprise Server 12-SP2-LTSS

SUSE Linux Enterprise Server 12-SP2-BCL

SUSE Enterprise Storage 5

HPE Helion Openstack 8

https://www.suse.com/security/cve/CVE-2020-0543.html

https://www.suse.com/security/cve/CVE-2020-0548.html

https://www.suse.com/security/cve/CVE-2020-0549.html

https://bugzilla.suse.com/1154824

https://bugzilla.suse.com/1156353

...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:1595-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate severity microcode update SUSE Linux Enterprise SUSE OpenStack side channel CacheOutAttack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here