Ubuntu Linux Kernel Spectre Vulnerability (CVE-2017-5715/5753) Patch Advisory

Vulnerability Overview: Security issue in the Linux kernel Vulnerability Description: - Jann Horn discovered that microprocessors utilizing speculative execution or branch prediction may allow unauthorized memory reads via side-channel attacks. This vulnerability is known as Spectre. A local attacker could exploit this vulnerability to expose sensitive information, including kernel memory. Update Information: - Note: Full mitigation of CVE-2017-5715 (Spectre Variant 2) requires corresponding processor microcode/firmware updates. In virtual machine environments, hypervisor updates are necessary. Ubuntu, in collaboration with Intel and AMD, provides future microcode updates to enable IBRS and IBPB features. Ubuntu users should contact their vendors to obtain necessary firmware updates. Ubuntu will provide corresponding QEMU updates to enable new CPU features in future virtualization environments. Ubuntu cloud users should contact their cloud providers to confirm that the hypervisor has been updated to expose new CPU features to virtual machines. - The issue can be resolved by updating to the following specific package versions: Risk Mitigation Recommendations: - Use Ubuntu Pro to receive 10 years of security coverage for over 25,000 Main and Universe packages. References: Includes information about Spectre and Meltdown, along with links related to CVE numbers: - CVE-2017-5753 - CVE-2017-5715 Related Advisories: Includes links to other security advisories related to Linux kernel vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu Linux Kernel Spectre Vulnerability (CVE-2017-5715/5753) Patch Advisory