Security Bulletin: This Power System update is being released to address CVE-2018-8931

Summary

POWER8/POWER9: In response to a security bypass vulnerability, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2018-8931.

Vulnerability Details

CVEID: ****CVE-2018-8931

DESCRIPTION: The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1.
CVSS Base Score: 6.0
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/140293 for the current score

CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)

The firmware update can be obtained from _ FixCentral_ by specifying the Product and fix level as specified in this Remediation section.

Affected Products and Versions

Firmware releases FW810, FW840, FW860 are affected - if in OPAL mode.

P9 OpenPOWER release OP910 is affected.

P8 OpenPOWER release OP810, OP815, OP820 and OP825 are affected.

Remediation/Fixes

Customers with the products below running 810, 840 or 860, install SP 860.60 (for OPAL mode).

1. IBM Power System S812L (8247-21L)

2. IBM Power System S822L (8247-22L)

3. IBM Power System S824L (8247-42L)

4. IBM Power System S812 (8284-21A)

5. IBM Power System S814 (8286-41A)

6. IBM Power System S824 (8286-42A)

7. IBM Power System S812L (5148-21L)

8. IBM Power System S822L (5148-22L)

Customers with the products below running OP910, install OP910.30

1. IBM Power System AC922 (8335-GTG)

Customers with the products below running OP910, install OP910.31

1. IBM Power System AC922 (8335-GTC)

2. IBM Power System AC922 (8335-GTW)

Customers with the product below running OP910, install OP910.32 - V0.55.1-20190503/BMC 2.06

1. IBM Power System LC922 (9006-22C)

2. IBM Power System LC922 (5104-22C)

Customer with the products below running OP810 or OP820, install OP820.30 - OP8_v1.12 2.96_H

1. IBM Power System S812LC (8348-21C)

Customer with the products below running OP820, install OP820.30 - OP8_v1.12 2.96_G

1)IBM Power System S822LC (8335-GTB)

Customer with the products below running OP825, install OP825.30 - v3.07_hmc

1. IBM Power Hardware Management Console System Firmware(7063-CR1)

Customer with the products below running OP815 or OP825, install OP825.30 - v3.07

1. IBM Power System S821LC (8001-12C)

2. IBM Power System S822LC (8001-22C)

Customer with the products below running OP825, install OP825.41 -v3.09

1. IBM Power Hyperconverged Systems with Nutanix CS821(8005-12N)

2. IBM Power Hyperconverged Systems with Nutanix CS822 (8005-22N)