Vulnerabilities Caused by CPU Speculative Execution

Overview

Modern CPUs have speculative execution capabilities, which improves processor performance. Depending on the design and architecture of the CPU, speculative execution can introduce side-channel-attack vulnerabilities.

Known Vulnerabilities

CVE	Aliases	CPUs Affected	Speculative Trigger	Impact	Mitigations	References
CVE-2017-5754	Meltdown	Intel	Out-of-order execution	Kernel memory disclosure to userspace	OS	https://www.kb.cert.org/vuls/id/584653 https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html
CVE-2017-5753	Spectre V1	Intel ARM	Branch prediction bounds check bypass	Cross- and intra-process (including kernel) memory disclosure	OS Compiler Browser	https://www.kb.cert.org/vuls/id/584653 https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
CVE-2017-5715	Spectre V2	Intel AMD ARM	Branch target injection	Cross- and intra-process (including kernel) memory disclosure	Microcode	https://www.kb.cert.org/vuls/id/584653 https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html https://www.amd.com/en/corporate/security-updates https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
CVE-2018-3640	Spectre V3a (RSRE)	Intel ARM	System register read	Cross- and intra-process (including kernel) memory disclosure	Microcode	https://www.kb.cert.org/vuls/id/180049 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
CVE-2018-3639	Spectre V4 (SSB)	Intel AMD ARM	Memory reads before prior memory write addresses known	Cross- and intra-process (including kernel) memory disclosure	OS Microcode	https://www.kb.cert.org/vuls/id/180049 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html https://www.amd.com/en/corporate/security-updates https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
CVE-2018-3665	Lazy FP	Intel	Lazy FPU state restore	Leak of FPU state	OS	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.html

Space shortcuts

Page tree

Overview

Known Vulnerabilities