Lazy FP State Restore - US

Lenovo Security Advisory: LEN-22880

Potential Impact: Information Disclosure

Severity: Medium

Scope of Impact: Industry-wide

CVE Identifier: CVE-2018-3665

Summary Description:

Intel states that system software may utilize the Lazy FP state restore technique to delay the restoring of state until an instruction operating on that state is actually executed by the new process. Systems using Intel® Core-based microprocessors may potentially allow a local process to infer data utilizing Lazy FP state restore from another process through a speculative execution side channel.

Mitigation Strategy for Customers (what you should do to protect yourself):

Intel recommends updating to the version (or later) described for your system in the product impact section.