USN-3597-1: Linux kernel vulnerabilities
USNS 3541-1 and 3523-1 provided mitigations for Spectre and Meltdown (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754) for the i386, amd64, and ppc64el architectures in Ubuntu 17.10. This update provides the corresponding mitigations for the arm64 architecture. Original advisory details: Jann Horn discovered that microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Meltdown. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2017-5754) Jann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2017-5715, CVE-2017-5753)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-4.13.0-37-lowlatencyto a version that resolves this vulnerability.Fixed in 4.13.0-37.42 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 4.13.0.37.40 - Upgrade
Upgrade
ubuntu/linux-image-4.13.0-37-genericto a version that resolves this vulnerability.Fixed in 4.13.0-37.42 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.13.0.37.40 - Upgrade
Upgrade
ubuntu/linux-image-4.13.0-1015-raspi2to a version that resolves this vulnerability.Fixed in 4.13.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-image-4.13.0-37-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.13.0-37.42 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 4.13.0.37.40 - Upgrade
Upgrade
ubuntu/linux-image-raspi2to a version that resolves this vulnerability.Fixed in 4.13.0.1015.13 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-3597-1
Event History
Frequently Asked Questions
What vulnerabilities are mitigated by USN-3597-1?
USN-3597-1 provides mitigations for Spectre and Meltdown vulnerabilities (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754).
Which architectures are affected by the vulnerabilities in USN-3597-1?
The vulnerabilities in USN-3597-1 affect the i386, amd64, ppc64el, and arm64 architectures.
How can I check if I am running a vulnerable version of the Linux kernel?
You can check the version of your Linux kernel and compare it with the remediation versions mentioned in the advisory.
How do I fix the vulnerabilities in USN-3597-1?
To fix the vulnerabilities, you need to update your Linux kernel to the remediation versions mentioned in the advisory.
Where can I find more information about the vulnerabilities mentioned in USN-3597-1?
You can find more information about the vulnerabilities in the Linux kernel on the official Ubuntu security website.