Bug 1848279 (CVE-2020-13844) - CVE-2020-13844 kernel: ARM straight-line speculation vulnerability
Summary: CVE-2020-13844 kernel: ARM straight-line speculation vulnerability
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2020-13844
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1848390 1848392 1848393 1911197
Blocks: 1846301
TreeView+ depends on / blocked
 
Reported: 2020-06-18 07:01 UTC by Wade Mealing
Modified: 2023-05-12 19:41 UTC (History)
48 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
A new speculative side-channel vulnerability was found that affects the ARM processor's code, 'Straight-line speculation.' This flaw allows a local attacker to infer cache contents through measuring timing access. The highest threat from this vulnerability is to confidentiality.
Clone Of:
Environment:
Last Closed: 2021-11-08 01:18:01 UTC
Embargoed:

Attachments (Terms of Use)

Description Wade Mealing 2020-06-18 07:01:49 UTC 
A new novel spectulative side channel vulnerability that affects ARM processors code named "Straight line speculation" has been discovered.  

Some versions of the ARM processors may speculative execute instructions after a branch in control flow (such as RET, BR, BLR assembly instructions).  If the codepath contains a "Speculative Revelation" style gadget which can affect internal core cache states which lead to the ability to infer cache contents similar to previous spectre attacks through analysing instruction execution time.
Comment 1 Wade Mealing 2020-06-18 07:02:01 UTC 
External References:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13844
http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.html
Comment 5 Wade Mealing 2020-06-18 09:35:59 UTC 
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 1848390]
Comment 8 Wade Mealing 2020-06-22 03:54:53 UTC 
This is an ARM specific flaw, which means only affects RHEL-8 and kernel-alt only.
Comment 9 Petr Matousek 2020-06-23 15:43:39 UTC 
Mitigation:

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Note You need to log in before you can comment on or make changes to this bug.