Intel Microcode Vulnerability Update: Mitigations for MDS Vulnerabilities
Summary
USN-3977-2: intel-microcode update. Affects intel-microcode versions < 3.20190514.0ubuntu0.14.04.2. Fixed in 3.20190514.0ubuntu0.14.04.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Intel Microcode is a critical component that provides low-level control over Intel processors, enabling them to function correctly and securely. It is essential for maintaining system stability and performance. The vulnerability in question affects various Intel processor families, specifically related to Microarchitectural Data Sampling (MDS) vulnerabilities, which could allow local attackers to expose sensitive information.
Vulnerability Detail
The vulnerability arises from the potential exposure of sensitive information stored in microarchitectural buffers of Intel CPU cores. This issue was identified by multiple researchers who discovered that data previously stored in these buffers could be accessed by a malicious process executing on the same CPU core. The vulnerabilities are identified by CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091, which highlight different aspects of the MDS vulnerabilities.
How To Fix
Minimum fixed version
3.20190514.0ubuntu0.14.04.2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade intel-microcodeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the execution of untrusted applications on the same CPU core as sensitive processes, although this does not fully mitigate the risk posed by the vulnerabilities.
Conclusion
The Intel Microcode vulnerabilities related to MDS pose significant risks to system security by allowing local attackers to access sensitive information. It is crucial for users to update their systems to the latest patched versions to mitigate these risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for intel-microcode →
FAQ
MDS vulnerabilities refer to a class of security issues that allow unauthorized access to sensitive data stored in microarchitectural buffers of Intel CPUs.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Local attackers could exploit these vulnerabilities to access sensitive information, potentially leading to data breaches or unauthorized access to confidential data.
The patched versions of the Intel Microcode are available for free for Ubuntu users, with no subscription required for certain distributions.
If immediate updates are not possible, consider implementing strict access controls and monitoring for suspicious activities on your system.
Related vulnerabilities
Recent vulnerabilities recorded for intel-microcode.
