USN-5319-1

Details

Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, and Cristiano Giuffrida discovered that hardware mitigations added by Intel to their processors to address Spectre-BTI were insufficient. A local attacker could potentially use this to expose sensitive information.

Affected Packages

Ubuntu:18.04:LTSlinux

Fixed in:

4.15.0-171.180

Ubuntu:18.04:LTSlinux-aws

Fixed in:

4.15.0-1123.132

Ubuntu:18.04:LTSlinux-azure-4.15

Fixed in:

4.15.0-1133.146

Ubuntu:18.04:LTSlinux-dell300x

Fixed in:

4.15.0-1037.42

Ubuntu:18.04:LTSlinux-gcp-4.15

Fixed in:

4.15.0-1118.132

Ubuntu:18.04:LTSlinux-kvm

Fixed in:

4.15.0-1109.112

Ubuntu:18.04:LTSlinux-oracle

Fixed in:

4.15.0-1089.98

Ubuntu:18.04:LTSlinux-raspi2

Fixed in:

4.15.0-1105.112

Ubuntu:18.04:LTSlinux-snapdragon

Fixed in:

4.15.0-1122.131

Ubuntu:Pro:14.04:LTSlinux-aws

Fixed in:

4.4.0-1101.106

Ubuntu:Pro:14.04:LTSlinux-azure

Fixed in:

4.15.0-1133.146~14.04.1

Ubuntu:Pro:14.04:LTSlinux-lts-xenial

Fixed in:

4.4.0-221.254~14.04.1

Ubuntu:Pro:16.04:LTSlinux

Fixed in:

4.4.0-221.254

Ubuntu:Pro:16.04:LTSlinux-aws

Fixed in:

4.4.0-1137.151

Ubuntu:Pro:16.04:LTSlinux-aws-hwe

Fixed in:

4.15.0-1123.132~16.04.1

Ubuntu:Pro:16.04:LTSlinux-azure

Fixed in:

4.15.0-1133.146~16.04.1

Ubuntu:Pro:16.04:LTSlinux-gcp

Fixed in:

4.15.0-1118.132~16.04.1

Ubuntu:Pro:16.04:LTSlinux-hwe

Fixed in:

4.15.0-171.180~16.04.1

Ubuntu:Pro:16.04:LTSlinux-kvm

Fixed in:

4.4.0-1102.111

Ubuntu:Pro:16.04:LTSlinux-oracle

Fixed in:

4.15.0-1089.98~16.04.1

References

REPORThttps://ubuntu.com/security/CVE-2022-0001 REPORThttps://ubuntu.com/security/CVE-2022-0002 ADVISORYhttps://ubuntu.com/security/notices/USN-5319-1

USN-5319-1

Details

Affected Packages

References

Upstream

Ecosystems

Timeline