Bug 1956602

Summary:	uOps: hw: spectre for uOPS
Product:	[Other] Security Response	Reporter:	Wade Mealing <wmealing>
Component:	vulnerability	Assignee:	Nobody <nobody>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	acaringi, adscvr, airlied, alciregi, bhu, bmasney, bskeggs, chwhite, crwood, dvlasenk, hdegoede, hkrzesin, jarodwilson, jeremy, jforbes, jlelli, jonathan, josef, jshortt, jstancek, jwboyer, kcarcia, kernel-maint, kernel-mgr, kgrant, lgoncalv, linville, masami256, mchehab, nmurray, ptalbert, qzhao, rvrbovsk, steved, walters, wcosta, williams
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in modern CPU architecture have a side channel attack based on the cached value of micro-op caching. The highest threat from this vulnerability is to data confidentiality.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-07-11 08:49:15 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1959788, 1959789, 1959790, 1957711, 1958075, 1958076, 1958077, 1958719, 1958721
Bug Blocks:	1956593

Description Wade Mealing 2021-05-04 03:56:11 UTC

Modern Intel, AMD, and ARM processors translate the common assembly instructions into simpler internal micro-ops that are then cached on-chip structure called a micro-op cache. The "dead uOps" paper outlines possible attacks that exploit the micro-op cache as a timing channel to transmit secret information.

https://comparch.org/2021/05/01/i-see-dead-uops-thoughts-on-the-latest-spectre-paper-targeting-uop-caches/

Comment 6 Wade Mealing 2021-05-06 10:31:29 UTC

Mitigation:

Mitigation for this issue is either not available or the currently available options does not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Comment 7 Wade Mealing 2021-05-06 10:45:46 UTC

Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 1957711]

Comment 36 Wade Mealing 2023-07-11 08:49:15 UTC

Closing as I can't react to this in my new role.