CVE-2017-5754 - hw: cpu: speculative execution permission faults handling

Back Back to CVE browser

MEDIUM

hw: cpu: speculative execution permission faults handling

Published Jan 4, 2018

5.6

MEDIUM

CVSS 3.1

EPSS 84.17%

Description

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

Affected products

Vendor Intel Corporation Product Most Modern Operating Systems Default
n/a
- Version
  All
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Intel Corporation

Most Modern Operating Systems

n/a

Version	Status	Constraints
All	affected	-

Red Hat Enterprise Linux 5 Extended Lifecycle Support

kernel-0:2.6.18-426.el5

Fixed · RHSA-2018:0292
Red Hat Enterprise Linux 5.9 Long Life

kernel-0:2.6.18-348.35.1.el5

Fixed · RHSA-2018:0464
Red Hat Enterprise Linux 6

kernel-0:2.6.32-696.28.1.el6

Fixed · RHSA-2018:1319
Red Hat Enterprise Linux 6.2 Advanced Update Support

kernel-0:2.6.32-220.76.2.el6

Fixed · RHSA-2018:0020
Red Hat Enterprise Linux 6.4 Advanced Update Support

kernel-0:2.6.32-358.84.2.el6

Fixed · RHSA-2018:0018
Red Hat Enterprise Linux 6.5 Advanced Update Support

kernel-0:2.6.32-431.85.2.el6

Fixed · RHSA-2018:0022
Red Hat Enterprise Linux 6.6 Advanced Update Support

kernel-0:2.6.32-504.64.4.el6

Fixed · RHSA-2018:0017
Red Hat Enterprise Linux 6.6 Telco Extended Update Support

kernel-0:2.6.32-504.64.4.el6

Fixed · RHSA-2018:0017
Red Hat Enterprise Linux 6.7 Extended Update Support

kernel-0:2.6.32-573.55.2.el6

Fixed · RHSA-2018:1346
Red Hat Enterprise Linux 7

kernel-0:3.10.0-862.el7

Fixed · RHSA-2018:1062
Red Hat Enterprise Linux 7

kernel-alt-0:4.14.0-49.2.2.el7a

Fixed · RHSA-2018:1374
Red Hat Enterprise Linux 7

kernel-rt-0:3.10.0-693.11.1.rt56.639.el7

Fixed · RHSA-2018:0016
Red Hat Enterprise Linux 7.2 Advanced Update Support

kernel-0:3.10.0-327.62.4.el7

Fixed · RHSA-2018:0010
Red Hat Enterprise Linux 7.2 Telco Extended Update Support

kernel-0:3.10.0-327.62.4.el7

Fixed · RHSA-2018:0010
Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions

kernel-0:3.10.0-327.62.4.el7

Fixed · RHSA-2018:0010
Red Hat Enterprise Linux 7.3 Extended Update Support

kernel-0:3.10.0-514.48.1.el7

Fixed · RHSA-2018:1129
Red Hat Enterprise MRG 2

kernel-rt-1:3.10.0-693.11.1.rt56.606.el6rt

Fixed · RHSA-2018:0021

Product	Package	State	Advisory
Red Hat Enterprise Linux 5 Extended Lifecycle Support	kernel-0:2.6.18-426.el5	Fixed	RHSA-2018:0292
Red Hat Enterprise Linux 5.9 Long Life	kernel-0:2.6.18-348.35.1.el5	Fixed	RHSA-2018:0464
Red Hat Enterprise Linux 6	kernel-0:2.6.32-696.28.1.el6	Fixed	RHSA-2018:1319
Red Hat Enterprise Linux 6.2 Advanced Update Support	kernel-0:2.6.32-220.76.2.el6	Fixed	RHSA-2018:0020
Red Hat Enterprise Linux 6.4 Advanced Update Support	kernel-0:2.6.32-358.84.2.el6	Fixed	RHSA-2018:0018
Red Hat Enterprise Linux 6.5 Advanced Update Support	kernel-0:2.6.32-431.85.2.el6	Fixed	RHSA-2018:0022
Red Hat Enterprise Linux 6.6 Advanced Update Support	kernel-0:2.6.32-504.64.4.el6	Fixed	RHSA-2018:0017
Red Hat Enterprise Linux 6.6 Telco Extended Update Support	kernel-0:2.6.32-504.64.4.el6	Fixed	RHSA-2018:0017
Red Hat Enterprise Linux 6.7 Extended Update Support	kernel-0:2.6.32-573.55.2.el6	Fixed	RHSA-2018:1346
Red Hat Enterprise Linux 7	kernel-0:3.10.0-862.el7	Fixed	RHSA-2018:1062
Red Hat Enterprise Linux 7	kernel-alt-0:4.14.0-49.2.2.el7a	Fixed	RHSA-2018:1374
Red Hat Enterprise Linux 7	kernel-rt-0:3.10.0-693.11.1.rt56.639.el7	Fixed	RHSA-2018:0016
Red Hat Enterprise Linux 7.2 Advanced Update Support	kernel-0:3.10.0-327.62.4.el7	Fixed	RHSA-2018:0010
Red Hat Enterprise Linux 7.2 Telco Extended Update Support	kernel-0:3.10.0-327.62.4.el7	Fixed	RHSA-2018:0010
Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions	kernel-0:3.10.0-327.62.4.el7	Fixed	RHSA-2018:0010
Red Hat Enterprise Linux 7.3 Extended Update Support	kernel-0:3.10.0-514.48.1.el7	Fixed	RHSA-2018:1129
Red Hat Enterprise MRG 2	kernel-rt-1:3.10.0-693.11.1.rt56.606.el6rt	Fixed	RHSA-2018:0021

Remediation

Red Hat statement

Please see the Vulnerability Response article for the full list of updates available and a detailed discussion of this issue. Meltdown patches for 32-bit Red Hat Enterprise Linux 5 ------------------------------------------------------ Red Hat has no current plans to provide mitigations for the Meltdown vulnerability in 32-bit Red Hat Enterprise Linux 5 environments. Following many hours of engineering investigation and analysis, Red Hat has determined that introducing changes to the Red Hat Enterprise Linux 5 environment would destabilize customer deployments and violate our application binary interface (ABI) and kernel ABI commitments to customers who rely on Red Hat Enterprise Linux 5 to be absolutely stable. Although Red Hat has delivered patches to mitigate the Meltdown vulnerability in other supported product offerings, the 32-bit Red Hat Enterprise Linux 5 environment presents unique challenges. The combination of limited address space in 32-bit environments plus the mechanism for passing control from the userspace to kernel and limitations on the stack during this transfer make the projected changes too invasive and disruptive for deployments that require the highest level of system stability. By contrast, 32-bit Meltdown mitigations have been delivered for Red Hat Enterprise Linux 6, where the changes are far less invasive and risky.

Weaknesses (2)

CWE-200

Exposure of Sensitive Information

CWE-208

References (72)

http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html
vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html
vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html
vendor-advisoryx_refsource_SUSE
http://nvidia.custhelp.com/app/answers/detail/a_id/4609
x_refsource_CONFIRMThird Party Advisory
http://nvidia.custhelp.com/app/answers/detail/a_id/4611
x_refsource_CONFIRM
http://nvidia.custhelp.com/app/answers/detail/a_id/4613
x_refsource_CONFIRM
http://nvidia.custhelp.com/app/answers/detail/a_id/4614
x_refsource_CONFIRM
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt
x_refsource_CONFIRM
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt
x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/584653
third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/102378
vdb-entryx_refsource_BID
http://www.securityfocus.com/bid/106128
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1040071
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://xenbits.xen.org/xsa/advisory-254.html
x_refsource_CONFIRMThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:0292
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2017-5754
Vendor Advisory
https://access.redhat.com/security/vulnerabilities/speculativeexecution
x_refsource_CONFIRMThird Party Advisory
https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/
x_refsource_CONFIRMThird Party Advisory
https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/
x_refsource_CONFIRMThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1519781
Issue Tracking
https://cdrdv2.intel.com/v1/dl/getContent/685358
x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
x_refsource_CONFIRM
https://cert.vde.com/en-us/advisories/vde-2018-002
x_refsource_CONFIRM
https://cert.vde.com/en-us/advisories/vde-2018-003
x_refsource_CONFIRM
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
x_refsource_CONFIRM
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14831
Advisory
https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html
x_refsource_MISCThird Party Advisory
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
x_refsource_CONFIRM
https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes
x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html
mailing-listx_refsource_MLIST
https://meltdownattack.com
x_refsource_MISCTechnical DescriptionThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-5754
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002
x_refsource_CONFIRMPatchThird Party AdvisoryVendor Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc
vendor-advisoryx_refsource_FREEBSD
https://security.gentoo.org/glsa/201810-06
vendor-advisoryx_refsource_GENTOO
https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html
x_refsource_MISCThird Party Advisory
https://security.netapp.com/advisory/ntap-20180104-0001/
x_refsource_CONFIRM
https://source.android.com/security/bulletin/2018-04-01
x_refsource_CONFIRM
https://spectreattack.com/
https://support.citrix.com/article/CTX231399
x_refsource_CONFIRM
https://support.citrix.com/article/CTX234679
x_refsource_CONFIRM
https://support.f5.com/csp/article/K91229003
x_refsource_CONFIRMThird Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us
x_refsource_CONFIRM
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us
x_refsource_CONFIRM
https://support.lenovo.com/us/en/solutions/LEN-18282
x_refsource_CONFIRMThird Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel
vendor-advisoryx_refsource_CISCO
https://usn.ubuntu.com/3522-3/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3522-4/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3523-1/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3540-2/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3541-2/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3583-1/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3597-1/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3597-2/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/usn/usn-3516-1/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/usn/usn-3522-2/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/usn/usn-3523-2/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/usn/usn-3524-2/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/usn/usn-3525-1/
vendor-advisoryx_refsource_UBUNTU
https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
x_refsource_CONFIRM
https://www.cve.org/CVERecord?id=CVE-2017-5754
https://www.debian.org/security/2018/dsa-4078
vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2018/dsa-4082
vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2018/dsa-4120
vendor-advisoryx_refsource_DEBIAN
https://www.kb.cert.org/vuls/id/180049
third-party-advisoryx_refsource_CERT-VN
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001
x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpuapr2020.html
x_refsource_MISC
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
x_refsource_MISC
https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/
x_refsource_CONFIRMThird Party Advisory
https://www.synology.com/support/security/Synology_SA_18_01
x_refsource_CONFIRMThird Party Advisory

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html		vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html		vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html		vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html		vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html		vendor-advisoryx_refsource_SUSE
http://nvidia.custhelp.com/app/answers/detail/a_id/4609		x_refsource_CONFIRMThird Party Advisory
http://nvidia.custhelp.com/app/answers/detail/a_id/4611		x_refsource_CONFIRM
http://nvidia.custhelp.com/app/answers/detail/a_id/4613		x_refsource_CONFIRM
http://nvidia.custhelp.com/app/answers/detail/a_id/4614		x_refsource_CONFIRM
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt		x_refsource_CONFIRM
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt		x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/584653		third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/102378		vdb-entryx_refsource_BID
http://www.securityfocus.com/bid/106128		vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1040071		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://xenbits.xen.org/xsa/advisory-254.html		x_refsource_CONFIRMThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:0292		vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2017-5754		Vendor Advisory
https://access.redhat.com/security/vulnerabilities/speculativeexecution		x_refsource_CONFIRMThird Party Advisory
https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/		x_refsource_CONFIRMThird Party Advisory
https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/		x_refsource_CONFIRMThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1519781		Issue Tracking
https://cdrdv2.intel.com/v1/dl/getContent/685358		x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf		x_refsource_CONFIRM
https://cert.vde.com/en-us/advisories/vde-2018-002		x_refsource_CONFIRM
https://cert.vde.com/en-us/advisories/vde-2018-003		x_refsource_CONFIRM
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability		x_refsource_CONFIRM
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14831		Advisory
https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html		x_refsource_MISCThird Party Advisory
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0		x_refsource_CONFIRM
https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes		x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html		mailing-listx_refsource_MLIST
https://meltdownattack.com		x_refsource_MISCTechnical DescriptionThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-5754
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002		x_refsource_CONFIRMPatchThird Party AdvisoryVendor Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc		vendor-advisoryx_refsource_FREEBSD
https://security.gentoo.org/glsa/201810-06		vendor-advisoryx_refsource_GENTOO
https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html		x_refsource_MISCThird Party Advisory
https://security.netapp.com/advisory/ntap-20180104-0001/		x_refsource_CONFIRM
https://source.android.com/security/bulletin/2018-04-01		x_refsource_CONFIRM
https://spectreattack.com/
https://support.citrix.com/article/CTX231399		x_refsource_CONFIRM
https://support.citrix.com/article/CTX234679		x_refsource_CONFIRM
https://support.f5.com/csp/article/K91229003		x_refsource_CONFIRMThird Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us		x_refsource_CONFIRM
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us		x_refsource_CONFIRM
https://support.lenovo.com/us/en/solutions/LEN-18282		x_refsource_CONFIRMThird Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel		vendor-advisoryx_refsource_CISCO
https://usn.ubuntu.com/3522-3/		vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3522-4/		vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3523-1/		vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3540-2/		vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3541-2/		vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3583-1/		vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3597-1/		vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3597-2/		vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/usn/usn-3516-1/		vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/usn/usn-3522-2/		vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/usn/usn-3523-2/		vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/usn/usn-3524-2/		vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/usn/usn-3525-1/		vendor-advisoryx_refsource_UBUNTU
https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin		x_refsource_CONFIRM
https://www.cve.org/CVERecord?id=CVE-2017-5754
https://www.debian.org/security/2018/dsa-4078		vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2018/dsa-4082		vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2018/dsa-4120		vendor-advisoryx_refsource_DEBIAN
https://www.kb.cert.org/vuls/id/180049		third-party-advisoryx_refsource_CERT-VN
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001		x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpuapr2020.html		x_refsource_MISC
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html		x_refsource_MISC
https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/		x_refsource_CONFIRMThird Party Advisory
https://www.synology.com/support/security/Synology_SA_18_01		x_refsource_CONFIRMThird Party Advisory