Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

References

• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html
• http://nvidia.custhelp.com/app/answers/detail/a_id/4609
• http://nvidia.custhelp.com/app/answers/detail/a_id/4611
• http://nvidia.custhelp.com/app/answers/detail/a_id/4613
• http://nvidia.custhelp.com/app/answers/detail/a_id/4614
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt

Related CVEs