Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 454
Alerts This Week
Warning Icon 1 454

Ubuntu 18.04 LTS: 0042-1 Severe Intel CPU Memory Leak Vulnerability

ubuntu
Calendar Grey August 14, 2018
Dist Ubuntu Esm H88
Security Advisory 0075-3 reveals serious flaws in AMD processors. Urgent measures must be taken.
On August 14, fixes for CVE-2018-3620 and CVE-2018-3646 were released into theUbuntu Xenial and Bionic kernels

Summary

On August 14, fixes for CVE-2018-3620 and CVE-2018-3646 were released into the

Ubuntu Xenial and Bionic kernels. These CVEs are security vulnerabilities

caused by flaws in the design of speculative execution hardware in the

computer's CPU. Researchers discovered that memory present in the L1 data

cache of an Intel CPU core may be visible to other processes running on the

same core.

Details on the vulnerability and our response can be found here:

https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/L1TF

Due to the high complexity of the fixes and the need for a corresponding

CPU microcode update for a complete fix, we are unable to livepatch these

CVEs. Please plan to reboot into an updated kernel as soon as possible.

Software Description:

- linux: Linux kernel

Topics%20covered

Topics Covered

security advisory kernel update critical ubuntu memory exposure speculative execution intel cpu

Update Instructions

Users running Ubuntu 18.04 LTS should upgrade to kernel version 4.15.0-32.35
or later.

Users running Ubuntu 16.04 LTS or 14.04 LTS should upgrade to kernel version 
4.4.0-133.159 or later.

References

CVE-2018-3620, and CVE-2018-3646

--

ubuntu-security-announce mailing list

ubuntu-security-announce@lists.ubuntu.com

Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

Severity
critical
Lowest
Low
Medium
High
Critical

August 14, 2018

Topics%20covered

Topics Covered

security advisory kernel update critical ubuntu memory exposure speculative execution intel cpu

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.