Ubuntu 19.04: USN-3977-2 Moderate: Intel Microcode Information Exposure

ubuntu

May 22, 2019

The system could be made to expose sensitive information.

Summary

The system could be made to expose sensitive information.

Software Description:

- intel-microcode: Processor microcode for Intel CPUs

Details:

USN-3977-1 provided mitigations for Microarchitectural Data Sampling

(MDS) vulnerabilities in Intel Microcode for a large number of Intel

processor families. This update provides the corresponding updated

microcode mitigations for Intel Cherry Trail and Bay Trail processor

families.

Original advisory details:

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Giorgi Maisuradze, Dan

Horea Lutas, Andrei Lutas, Volodymyr Pikhur, Stephan van Schaik, Alyssa

Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos,

Cristiano Giuffrida, Moritz Lipp, Michael Schwarz, and Daniel Gruss

discovered that memory previously stored in microarchitectural fill buffers

of an Intel CPU core may be exposed to a malicious process that is

executing on the same CPU core. A local attacker could use this to expose

s...

Read the Full Advisory

Topics Covered

security advisory update Ubuntu information exposure sensitive information intel-microcode microarchitectural

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  intel-microcode                 3.20190514.0ubuntu0.19.04.3

Ubuntu 18.10:
  intel-microcode                 3.20190514.0ubuntu0.18.10.2

Ubuntu 18.04 LTS:
  intel-microcode                 3.20190514.0ubuntu0.18.04.3

Ubuntu 16.04 LTS:
  intel-microcode                 3.20190514.0ubuntu0.16.04.2

Ubuntu 14.04 ESM:
  intel-microcode                 3.20190514.0ubuntu0.14.04.2

After a standard system update you need to reboot your computer to make
all the necessary changes.