Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Ubuntu 14.04 LTS USN-3690-2 Critical AMD Microcode Memory Exposure

ubuntu
Calendar Grey July 5, 2018
Dist Ubuntu Esm H88
Tackling the AMD Microcode rollback challenge in Ubuntu to reduce vulnerabilities related to sensitive information leakage.
The system could be made to expose sensitive information.

Summary

The system could be made to expose sensitive information.

Software Description:

- amd64-microcode: Processor microcode firmware for AMD CPUs

Details:

USN-3690-1 provided updated microcode for AMD processors to address

CVE-2017-5715 (aka Spectre). Unfortunately, the update caused some

systems to fail to boot. This update reverts the update for Ubuntu

14.04 LTS.

We apologize for the inconvenience.

Original advisory details:

Jann Horn discovered that microprocessors utilizing speculative execution

and branch prediction may allow unauthorized memory reads via sidechannel

attacks. This flaw is known as Spectre. A local attacker could use this to

expose sensitive information, including kernel memory.

This update provides the microcode updates for AMD 17H family

processors required for the corresponding Linux kernel updates.

Topics%20covered

Topics Covered

security advisory critical software update Ubuntu sensitive information memory exposure amd64-microcode

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  amd64-microcode                 3.20180524.1~ubuntu0.14.04.2+really20130710.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3690-2

https://ubuntu.com/security/notices/USN-3690-1

https://bugs.launchpad.net/ubuntu/+source/amd64-microcode/+bug/1779092

Severity
critical
Lowest
Low
Medium
High
Critical

July 05, 2018

Topics%20covered

Topics Covered

security advisory critical software update Ubuntu sensitive information memory exposure amd64-microcode

Package Information

https://launchpad.net/ubuntu/+source/amd64-microcode/3.20180524.1~ubuntu0.14.04.2+really20130710.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.