USN-3531-1: Intel Microcode update
It was discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2017-5715) This update provides the microcode updates required for the corresponding Linux kernel updates.
Affected Software
Event History
Frequently Asked Questions
What is USN-3531-1?
USN-3531-1 is a security notice issued by Ubuntu, addressing a vulnerability in the Intel Microcode.
What is the vulnerability addressed by USN-3531-1?
USN-3531-1 addresses the Spectre vulnerability (CVE-2017-5715), which allows unauthorized memory reads via side-channel attacks.
How does the Spectre vulnerability (CVE-2017-5715) affect microprocessors?
The Spectre vulnerability affects microprocessors utilizing speculative execution and branch prediction, allowing unauthorized memory reads.
What is the impact of the Spectre vulnerability (CVE-2017-5715)?
The Spectre vulnerability can be exploited by a local attacker to expose sensitive information, including kernel memory.
How can I mitigate the Spectre vulnerability addressed in USN-3531-1?
To mitigate the Spectre vulnerability, it is recommended to install the latest version (3.20180108.0~ubuntuXX.XX.X) of the intel-microcode package provided by Ubuntu.