[FREEBSD:4E07D94F-75A5-11E8-85D1-A4BADB2F4699] FreeBSD -- Lazy FPU State Restore Information Disclosure

Severity Medium

Affected Packages 1

CVEs 1

Problem Description:
A subset of Intel processors can allow a local thread
to infer data from another thread through a speculative
execution side channel when Lazy FPU state restore is
used.
Impact:
Any local thread can potentially read FPU state information
from other threads running on the host. This could include
cryptographic keys when the AES-NI CPU feature is present.

Package	Affected Version
pkg:freebsd/FreeBSD-kernel	< 11.1_11

ID

FREEBSD:4E07D94F-75A5-11E8-85D1-A4BADB2F4699

Severity

medium

Severity from

CVE-2018-3665

URL

http://vuxml.freebsd.org/freebsd/4e07d94f-75a5-11e8-85d1-a4badb2f4699.html

Published

2018-06-21T00:00:00
(6 years ago)

Modified

2018-06-21T00:00:00
(6 years ago)

Rights

FreeBSD VuXML Security Team

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:freebsd/FreeBSD-kernel		FreeBSD-kernel	< 11.1_11

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date