SWAPGS Attack — New Speculative Execution Flaw Affects All Modern Intel CPUs

A new variant of the Spectre Variant 1 side-channel vulnerability has been discovered that affects all modern Intel CPUs, and probably some AMD processors as well, which leverage speculative execution for high performance, Microsoft and Red Hat warned. Identified as CVE-2019-1125, the vulnerabili...

CVE-2019-1125

An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an...

UBUNTU-CVE-2019-1125

An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an...

July 9, 2019—KB4507450 (OS Build 15063.1928)

None None...

July 9, 2019—KB4507453 (OS Build 18362.239)

None None...

July 9, 2019—KB4507448 (Monthly Rollup)

None None...

July 9, 2019—KB4507435 (OS Build 17134.885)

None None...

July 9, 2019—KB4507449 (Monthly Rollup)

None None...

July 9, 2019—KB4507461 (Security-only update)

None None...

July 9, 2019—KB4507462 (Monthly Rollup)

None None...

July 9, 2019—KB4507458 (OS Build 10240.18275)

None None...

July 9, 2019—KB4507455 (OS Build 16299.1268)

None None...

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an...

July 9, 2019—KB4507457 (Security-only update)

None None...

July 9, 2019—KB4507456 (Security-only update)

None None...

July 9, 2019—KB4507464 (Security-only update)

None None...

July 9, 2019—KB4507452 (Monthly Rollup)

None None...

SWAPGS Spectre Side-Channel Vulnerability

The Cybersecurity and Infrastructure Security Agency CISA is aware of a vulnerability CVE-2019-1125 known as SWAPGS, which is a variant of Spectre Variant 1—that affects modern computer processors. This vulnerability can be exploited to steal sensitive data present in a computer systems' memory...

Medium: kernel

Issue Overview: There is a newly discovered variant side-channel attack of Spectre V1 which leverages SWAPGS instructions to bypass KPTI/KVA mitigations. This could lead to a kernel information disclosure. CVE-2019-1125 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2...

Medium: kernel

Issue Overview: There is a newly discovered variant side-channel attack of Spectre V1 which leverages SWAPGS instructions to bypass KPTI/KVA mitigations. This could lead to a kernel information disclosure Affected Packages: kernel Issue Correction: Run yum update kernel or yum update --advisory...