Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2020-13844

Published: 8 June 2020

Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."

Notes

AuthorNote
sbeattie
gcc-3.3 only provides libstdc++5
mdeslaur
Fixing this in stable release would likely require rebuilding
the whole archive using the fixed compiler. Deferring CVE for
now until further information is available.
sbeattie
fixed upstream in 10.3.0 and 9.4.0
rodrigo-zaiden
backport to older versions of llvm-toolchain is risky
and is likely to introduce regressions.

Priority

Medium

Cvss 3 Severity Score

5.5

Score breakdown

Status

Package Release Status
gcc-10
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Ignored
(end of life)
focal
Released (10.2.0-5ubuntu1~20.04)
groovy Not vulnerable
(10.2.0-5ubuntu1)
hirsute Not vulnerable
(10.2.0-5ubuntu1)
impish Not vulnerable
(10.2.0-5ubuntu1)
jammy Not vulnerable
(10.2.0-5ubuntu1)
kinetic Not vulnerable
(10.2.0-5ubuntu1)
lunar Not vulnerable
(10.2.0-5ubuntu1)
mantic Not vulnerable
(10.2.0-5ubuntu1)
noble Not vulnerable
(10.2.0-5ubuntu1)
trusty Does not exist

upstream
Released (10.3.0)
xenial Does not exist

Patches:
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=a9ba2a9b77bec7eacaf066801f22d1c366a2bc86
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=be178ecd5ac1fe1510d960ff95c66d0ff831afe1
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=96b7f495f9269d5448822e4fc28882edb35a58d7



gcc-3.3
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Deferred

kinetic Ignored
(end of life, was deferred)
lunar Ignored
(end of life, was deferred)
mantic Deferred

noble Deferred

trusty Ignored

upstream Needs triage

xenial Deferred

gcc-4.4
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-4.6
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-4.7
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Ignored

upstream Needs triage

xenial Deferred

gcc-4.7-armel-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

gcc-4.7-armhf-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

gcc-4.8
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Deferred

upstream Needs triage

xenial Deferred

gcc-4.8-arm64-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-armhf-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-powerpc-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-ppc64el-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.9
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

gcc-5
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(code not present)
eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Not vulnerable
(code not present)
gcc-5-cross
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

gcc-6
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-6-cross
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-6-cross-ports
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-7
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-7-cross
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-7-cross-ports
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-8
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-8-cross
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-8-cross-ports
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-9
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Ignored
(end of life)
focal
Released (9.4.0-1ubuntu1~20.04)
groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Not vulnerable
(9.4.0-5ubuntu1)
kinetic Not vulnerable
(9.4.0-5ubuntu1)
lunar Not vulnerable
(9.4.0-5ubuntu1)
mantic Not vulnerable
(9.4.0-5ubuntu1)
noble Not vulnerable
(9.4.0-5ubuntu1)
trusty Does not exist

upstream
Released (9.4.0)
xenial Does not exist

Patches:



upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=20da13e395bde597d8337167c712039c8f923c3b
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=dc586a749228ecfb71f72ec2ca10e6f7b6874af3
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=2155170525f93093b90a1a065e7ed71a925566e9
gcc-9-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Deferred

kinetic Ignored
(end of life, was deferred)
lunar Ignored
(end of life, was deferred)
mantic Deferred

noble Deferred

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-9-cross-ports
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Deferred

kinetic Ignored
(end of life, was deferred)
lunar Ignored
(end of life, was deferred)
mantic Deferred

noble Deferred

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-arm-linux-androideabi
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

gcc-arm-none-eabi
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Deferred

kinetic Ignored
(end of life, was deferred)
lunar Ignored
(end of life, was deferred)
mantic Deferred

noble Deferred

trusty Does not exist

upstream Needs triage

xenial Deferred

gcc-avr
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Deferred

kinetic Ignored
(end of life, was deferred)
lunar Ignored
(end of life, was deferred)
mantic Deferred

noble Deferred

trusty Does not exist

upstream Needs triage

xenial Deferred

gcc-defaults
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(code not present)
eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Deferred

kinetic Ignored
(end of life, was deferred)
lunar Ignored
(end of life, was deferred)
mantic Deferred

noble Deferred

trusty Deferred

upstream Needs triage

xenial Not vulnerable
(code not present)
gcc-defaults-arm64-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-defaults-armel-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-defaults-armhf-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-defaults-powerpc-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-defaults-ppc64el-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-h8300-hms
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Deferred

kinetic Ignored
(end of life, was deferred)
lunar Ignored
(end of life, was deferred)
mantic Deferred

noble Deferred

trusty Does not exist

upstream Needs triage

xenial Deferred

gcc-i686-linux-android
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

gcc-m68hc1x
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Deferred

kinetic Ignored
(end of life, was deferred)
lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

gcc-mingw-w64
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Deferred

kinetic Ignored
(end of life, was deferred)
lunar Ignored
(end of life, was deferred)
mantic Deferred

noble Deferred

trusty Ignored

upstream Needs triage

xenial Deferred

gcc-msp430
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Deferred

kinetic Ignored
(end of life, was deferred)
lunar Ignored
(end of life, was deferred)
mantic Deferred

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

gcc-opt
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Deferred

kinetic Ignored
(end of life, was deferred)
lunar Ignored
(end of life, was deferred)
mantic Deferred

noble Deferred

trusty Does not exist

upstream Needs triage

xenial Deferred

gcc-snapshot
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Ignored
(end of life)
focal Deferred

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Deferred

kinetic Ignored
(end of life, was deferred)
lunar Ignored
(end of life, was deferred)
mantic Deferred

noble Deferred

trusty Does not exist

upstream Needs triage

xenial Deferred

gccgo-4.9
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Ignored

upstream Needs triage

xenial Does not exist

gccgo-6
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Not vulnerable
(code not present)
llvm-toolchain-3.3
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

llvm-toolchain-3.4
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

llvm-toolchain-3.5
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

llvm-toolchain-3.6
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Ignored

upstream Needs triage

xenial Deferred

llvm-toolchain-3.7
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

llvm-toolchain-3.8
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Ignored

upstream Needs triage

xenial Deferred

llvm-toolchain-3.9
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Ignored

upstream Needs triage

xenial Deferred

llvm-toolchain-4.0
Launchpad, Ubuntu, Debian
bionic Deferred

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Deferred

llvm-toolchain-snapshot
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

Severity score breakdown

Parameter Value
Base score 5.5
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Scope Unchanged
Confidentiality High
Integrity impact None
Availability impact None
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N