Ubuntu 19.04: USN-3977-3 Critical: Intel Microcode Update for MDS

ubuntu

June 20, 2019

The system could be made to expose sensitive information.

Summary

The system could be made to expose sensitive information.

Software Description:

- intel-microcode: Processor microcode for Intel CPUs

Details:

USN-3977-1 and USN-3977-2 provided mitigations for Microarchitectural

Data Sampling (MDS) vulnerabilities in Intel Microcode for a

large number of Intel processor families. This update provides the

corresponding updated microcode mitigations for the Intel Sandy Bridge

processor family

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Giorgi Maisuradze, Dan

Horea Lutas, Andrei Lutas, Volodymyr Pikhur, Stephan van Schaik, Alyssa

Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos,

Cristiano Giuffrida, Moritz Lipp, Michael Schwarz, and Daniel Gruss

discovered that memory previously stored in microarchitectural fill buffers

of an Intel CPU core may be exposed to a malicious process that is

executing on the same CPU core. A local attacker could use this to expose

sensitive information. (CVE-2018-1213...

Read the Full Advisory

Topics Covered

security advisory ubuntu sensitive information microcode update Intel CPU MDS issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  intel-microcode                 3.20190618.0ubuntu0.19.04.1

Ubuntu 18.10:
  intel-microcode                 3.20190618.0ubuntu0.18.10.1

Ubuntu 18.04 LTS:
  intel-microcode                 3.20190618.0ubuntu0.18.04.1

Ubuntu 16.04 LTS:
  intel-microcode                 3.20190618.0ubuntu0.16.04.1

Ubuntu 14.04 ESM:
  intel-microcode                 3.20190618.0ubuntu0.14.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.