• Skip to content
  • Skip to primary sidebar

UCI Information Security

Information Security at the University of California, Irvine

Updates

Intel CPU bug forcing kernel updates for Windows, Linux, and MacOS Part 2

January 4, 2018 by Hillary Chansavang Leave a Comment

More information, including two papers on the CPU issues, has been released. The papers on the two bugs, called “Meltdown” and “Spectre” are available from: https://meltdownattack.com/. These papers are technical descriptions of the bugs. Meltdown works on Intel processors only, Spectre works on Intel, AMD, and ARM processors.

Microsoft released patches today – the patch is not enabled by default and has to be enabled manually after the patch is applied. In addition, the patch will not be available for systems that are running incompatible anti-virus – some AV packages make calls into kernel memory that will cause a blue-screen-of-death if the patch is applied and enabled. More information from Microsoft is available here:
https://support.microsoft.com/en-us/help/4072699/important-information-regarding-the-windows-security-updates-released

A security researcher has a Google Docs spreadsheet of the status of AV products here:
https://docs.google.com/spreadsheets/d/184wcDt9I9TUNFFbsAVLpzAtckQxYiuirADzf3cL42FQ/edit#gid=0

Windows Server Guidance to protect against the speculative execution side-channel vulnerabilities:
https://support.microsoft.com/en-us/help/4072698/windows-server-guidance-to-protect-against-the-speculative-execution-s

Windows Client Guidance for IT Pros to protect against speculative execution side-channel vulnerabilities:
https://support.microsoft.com/en-us/help/4073119/windows-client-guidance-for-it-pros-to-protect-against-speculative-exe

List of Meltdown and Spectre Vulnerability Advisories, Patches, & Updates:
https://www.bleepingcomputer.com/news/security/list-of-meltdown-and-spectre-vulnerability-advisories-patches-and-updates/

A Simple Explanation of the Differences Between Meltdown and Spectre:
https://danielmiessler.com/blog/simple-explanation-difference-meltdown-spectre/

Reportedly MacOS 10.13.2 has the fixes in it and was released December 6, 2017.

Share

Filed Under: News Tagged With: CPU bug, Firmware, Intel, Linux, MacOS, Meltdown, Spectre, Updates, Windows

Intel CPU bug forcing kernel updates for Windows, Linux, and MacOS

January 3, 2018 by Hillary Chansavang Leave a Comment

A flaw in the design of Intel’s CPU chips is forcing large kernel updates for Windows, Linux, and MacOS systems. This bug affects all Intel processors produced over the last 10 years (at least), and is not fixable via firmware updates. Expect the changes to be released very soon.

The flaw allows normal user programs to possibly access protected kernel memory, which should not be allowed under normal circumstances. This flaw could allow someone to gain access to items in memory that should not be seen by user programs, such as the contents of other user’s files, encryption keys, etc. Since this bug will require re-architecting how the kernel is protected in memory, there will be a performance hit when switching between the kernel and user processes. Some estimates of the performance hit are 5-30% slowdown.

There’s a reasonable chance that the changes will have bugs that could cause system problems, but you should install the updates reasonably soon after they are released. The bug impacts Azure, Amazon, and Google cloud environments. You can expect those providers to schedule maintenance and reboots soon to implement the fixes in their environments. AMD has stated that their CPUs are not affected by this bug.

More information is available from: https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/

Share

Filed Under: News Tagged With: CPU bug, Firmware, Intel, Linux, MacOS, Meltdown, Spectre, Updates, Windows

Primary Sidebar

Tags

Acrobat Acrobat Reader Adobe auth authentication breach Bruce Schneier CPU bug credit cards Critical Bug Data Breach Drupal Firefox Firmware Flash Google Intel iOS iTunes Java Joomla! KVM Linux Mac MacOS Mac OS Mac OS X Meltdown multi-factor Oracle Privacy QEMU QuickTime Rails Ruby Safari Solaris Spectre Thunderbird Update Updates Upgrade Windows WordPress Xen

Archives

  • April 2018
  • March 2018
  • January 2018
  • October 2017
  • August 2017
  • April 2017
  • March 2017
  • February 2017
  • January 2017
  • December 2016
  • October 2016
  • September 2016
  • July 2016
  • June 2016
  • May 2016
  • April 2016
  • March 2016
  • February 2016
  • January 2016
  • December 2015
  • November 2015
  • October 2015
  • September 2015
  • August 2015
  • July 2015
  • June 2015
  • May 2015
  • April 2015
  • March 2015
  • February 2015
  • January 2015
  • December 2014
  • November 2014
  • October 2014
  • September 2014
  • August 2014
  • July 2014
  • June 2014
  • May 2014
  • April 2014
  • March 2014
  • February 2014
  • January 2014
  • December 2013
  • November 2013
  • October 2013
  • September 2013
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • December 2012
  • November 2012
  • October 2012
  • September 2012
  • August 2012
  • July 2012
  • June 2012
  • May 2012
  • April 2012
  • March 2012
  • February 2012
  • January 2012
  • December 2011
  • November 2011
  • October 2011
  • September 2011
  • August 2011
  • July 2011
  • June 2011
  • May 2011
  • April 2011
  • March 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • September 2010
  • August 2010

© 2019 UC Regents