linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, ilinux-lts-xenial, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, and Cristiano Giuffrida discovered that hardware mitigations added by Intel to their processors to address Spectre-BTI were insufficient. A local attacker could potentially use this to expose sensitive information.
02 / AFFECTED SOFTWARE
Affected packages
89 explicit affected versions
77 explicit affected versions
33 explicit affected versions
21 explicit affected versions
32 explicit affected versions
71 explicit affected versions
57 explicit affected versions
75 explicit affected versions
55 explicit affected versions
69 explicit affected versions
64 explicit affected versions
113 explicit affected versions
136 explicit affected versions
91 explicit affected versions
56 explicit affected versions
87 explicit affected versions
79 explicit affected versions
104 explicit affected versions
70 explicit affected versions
55 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, and Cristiano Giuffrida discovered that hardware mitigations added by Intel to their processors to address Spectre-BTI were insufficient. A local attacker could potentially use this to expose sensitive information.
05 / REFERENCES