DSA-4078: -1 linux -- security update
Published Jan 4, 2018
·Updated
linux - security update
Other sources
Multiple researchers have discovered a vulnerability in Intel processors, enabling an attacker controlling an unprivileged process to read memory from arbitrary addresses, including from the kernel and all other processes running on the system.
Affected Software
2 affected components
debian/linux
debian/linux
Event History
Jan 4, 2018
Advisory Published
12:00 AM
Frequently Asked Questions
1
Who is exposed to this issue?
Systems running Debian Linux on affected Intel processors are exposed if an attacker can control an unprivileged process on the system.
2
What does an attacker need to exploit it?
The attacker needs the ability to run or control an unprivileged process. The issue can then allow reads from arbitrary memory addresses, including kernel memory and memory belonging to other processes.
3
What information could be exposed?
The vulnerability may expose memory from the kernel and from all other processes running on the affected system.