CVE-2017-5754

Published: 3 January 2018

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

From the Ubuntu Security Team

Jann Horn discovered that microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Meltdown. A local attacker could use this to expose sensitive information, including kernel memory.

Notes

Variant 3, aka Meltdown
This flaw only affects Intel processors. AMD reports that their
processors are not affected.
The break-fix lines for this CVE are not complete since a large
number of patches are required to mitigate this issue. The commit(s) listed
are chosen as placeholders for automated CVE triage purposes.
ppc64el and s390x kernels were fixed with the following commits:

local-2017-5754-ppc64el

local-2017-5754-s390x Unfortunately, the automated CVE triage tooling gets confused since the commits identified by the local-* placeholders were reverted in favor of the upstream commits so they're not included in the break-fix section below.

Priority

Critical

CVSS 3 base score: 5.6

Status

References

• https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5754
• https://github.com/IAIK/KAISER
• https://gruss.cc/files/kaiser.pdf
• https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html
• https://googleprojectzero.blogspot.co.uk/2018/01/reading-privileged-memory-with-side.html
• https://meltdownattack.com/
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr
• http://www.amd.com/en/corporate/speculative-execution
• https://developer.arm.com/support/security-update
• https://ubuntu.com/security/notices/USN-3516-1
• https://ubuntu.com/security/notices/USN-3522-1
• https://ubuntu.com/security/notices/USN-3522-2
• https://ubuntu.com/security/notices/USN-3523-1
• https://ubuntu.com/security/notices/USN-3524-1
• https://ubuntu.com/security/notices/USN-3524-2
• https://ubuntu.com/security/notices/USN-3525-1
• https://ubuntu.com/security/notices/USN-3523-2
• https://ubuntu.com/security/notices/USN-3540-2
• https://ubuntu.com/security/notices/USN-3540-1
• https://ubuntu.com/security/notices/USN-3541-1
• https://ubuntu.com/security/notices/USN-3541-2
• https://ubuntu.com/security/notices/USN-3583-1
• https://ubuntu.com/security/notices/USN-3597-1
• https://ubuntu.com/security/notices/USN-3597-2
• NVD
• Launchpad
• Debian