DSA-5475: -1 linux -- security update

Published Aug 11, 2023

Updated

Daniel Moghimi discovered Gather Data Sampling (GDS), a hardware vulnerability for Intel CPUs which allows unprivileged speculative access to data which was previously stored in vector registers.

Affected Software

2 affected componentsFixes available

debian/linux

6.1.176-16.1.190-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1

Event History

Aug 11, 2023

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Who can exploit this issue?

An unprivileged attacker running code on a system with an affected Intel CPU could attempt speculative access to data previously stored in vector registers.

What information could be exposed?

The vulnerability may expose data that was previously stored in vector registers through speculative execution.