You can sign up to get a daily email of our articles, see the Mailing List page!

Have an Intel processor? Enjoy two more vulnerabilities

By - | Views: 21,796

Intel are not having a good time lately are they? More vulnerabilities in their CPUs have been made public.

How many is that Intel have had recently that affect them? Quite a lot. This time, it appears AMD are not affected at least. Still, this is a lot of major security problems to go through with Spectre and Meltdown, Foreshadow and ZombieLoad. Currently, Intel are saying that they're "not aware of any use of these issues outside of a controlled lab environment" so you don't need to go and panic just yet. Just keep an eye on updates for your distribution and motherboard BIOS updates.

Here's they two they're now talking about:

CVE-2020-0548 is an information disclosure vulnerability with a CVSS score of 2.8, low, referred to as Vector Register Sampling. This issue is rated “low” as the user would first need to be authenticated on the target system, the high complexity of an attack, and low confidence in the attacker’s ability to target and retrieve relevant data.

CVE-2020-0549 is also an information disclosure vulnerability requiring authenticated local access. The CVSS score is 6.5, medium. Referred to as L1D Eviction Sampling, the severity score is higher on this one because the attack complexity is lower and the ability to target specific data higher. This vulnerability has little to no impact in virtual environments that have applied L1 Terminal Fault mitigations.

If you have an Intel CPU made before Q4 2018, you're likely affected. CVE-2020-0549, which is also being called CacheOut which has a dedicated website mentions that "Intel inadvertently managed to partially mitigate this issue while addressing a previous issue".

You can see Intel's official post on it here.

Article taken from GamingOnLinux.com.
22 Likes, Who?
We do often include affiliate links to earn us some pennies. We are currently affiliated with GOG, Humble Store and Paradox Interactive. See more here.
About the author -
author picture
I am the owner of GamingOnLinux. After discovering Linux back in the days of Mandrake in 2003, I constantly came back to check on the progress of Linux until Ubuntu appeared on the scene and it helped me to really love it. You can reach me easily by emailing GamingOnLinux directly.
See more from me
44 comments
Page: «5/5
  Go to:

Eike 2 February 2020 at 8:45 am UTC
pete910
beko
EikeNot everybody changed their computer yesterday, and Intel was better for decades.
^-- This.

True but a lot did 3 years ago to yesterday

I wanted to buy a new processor for some time now, but I couldn't justify buying Ryzen 1000 or 2000. So for me, it's more like half a year instead of three.
The_Aquabat 3 February 2020 at 5:10 am UTC
pete910

So basically because of your shall we say heavy hand and not looking at what you are doing that's a failing of AMD's/PGA

I've used PGA since the original P100(Socket 7 sPGA) days and I have never ever done that!

oh the good old days ! did you also had a K6-2?? that sure was a superior cpu, AMD superiority has always been there! I ran vista on that.
AMD has always been very linux friendly basically the first full OS that ran in full 64bits mode, when their first 64bits cpus came out was Linux. IT's simply not true that Intel linux support is better. otoh what is actually true is that ATI's support before it was AMD was crap.


Last edited by The_Aquabat on 3 February 2020 at 5:17 am UTC
pete910 3 February 2020 at 5:24 pm UTC
View PC info
  • Supporter
  • Top Supporter
The_Aquabat
pete910

So basically because of your shall we say heavy hand and not looking at what you are doing that's a failing of AMD's/PGA

I've used PGA since the original P100(Socket 7 sPGA) days and I have never ever done that!

oh the good old days ! did you also had a K6-2?? that sure was a superior cpu, AMD superiority has always been there! I ran vista on that.
AMD has always been very linux friendly basically the first full OS that ran in full 64bits mode, when their first 64bits cpus came out was Linux. IT's simply not true that Intel linux support is better. otoh what is actually true is that ATI's support before it was AMD was crap.

I've had both a K6 233 and a k6-2 500

Surprising large amount of people think its AMD's fault in the ATI era.
The_Aquabat 4 February 2020 at 4:58 am UTC
pete910I've had both a K6 233 and a k6-2 500

Surprising large amount of people think its AMD's fault in the ATI era.

I had a k6-2+ at 450 overclocked to 500 mhz. The k6 III was gold really difficult to find the supply was limited.
While you're here, please consider supporting GamingOnLinux on Patreon, Liberapay or Paypal. We have no adverts, no paywalls, no timed exclusive articles. Just good, fresh content. Without your continued support, we simply could not continue!

You can find even more ways to support us on this dedicated page any time. If you already are, thank you!

You need to Register and Login to comment, submit articles and more.


Or login with...

Livestreams & Videos
None currently, submit yours here!
Popular this week
View by Category
Contact
Latest Comments
Latest Forum Posts