[Bug 1742364] [NEW] Updated microcode for Spectre fix

[Leith Bade]

*** This bug is a security vulnerability ***

Public security bug reported:

Intel have finally released the updated microcode for the Spectre bug.

See https://downloadcenter.intel.com/download/27431/Linux-Processor-
Microcode-Data-File?v=t

>From the release note:
Intel Processor Microcode Package for Linux
20180108 Release

-- Updates upon 20171117 release --
IVT C0		(06-3e-04:ed) 428->42a
SKL-U/Y D0	(06-4e-03:c0) ba->c2
BDW-U/Y E/F	(06-3d-04:c0) 25->28
HSW-ULT Cx/Dx	(06-45-01:72) 20->21
Crystalwell Cx	(06-46-01:32) 17->18
BDW-H E/G	(06-47-01:22) 17->1b
HSX-EX E0	(06-3f-04:80) 0f->10
SKL-H/S R0	(06-5e-03:36) ba->c2
HSW Cx/Dx	(06-3c-03:32) 22->23
HSX C0		(06-3f-02:6f) 3a->3b
BDX-DE V0/V1	(06-56-02:10) 0f->14
BDX-DE V2	(06-56-03:10) 700000d->7000011
KBL-U/Y H0	(06-8e-09:c0) 62->80
KBL Y0 / CFL D0	(06-8e-0a:c0) 70->80
KBL-H/S B0	(06-9e-09:2a) 5e->80
CFL U0		(06-9e-0a:22) 70->80
CFL B0		(06-9e-0b:02) 72->80
SKX H0		(06-55-04:b7) 2000035->200003c
GLK B0		(06-7a-01:01) 1e->22

These should be released ASAP since they will be needed for the upcoming
Spectre fixes in the Kernel.

** Affects: intel
     Importance: Undecided
         Status: New

** Affects: intel-microcode (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: cve-2017-5715 cve-2017-5753 intel security spectre

** Attachment added: "microcode-20180108.tgz"
   https://bugs.launchpad.net/bugs/1742364/+attachment/5034070/+files/microcode-20180108.tgz

** Information type changed from Private Security to Public Security

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5715

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5753

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to intel-microcode in Ubuntu.
https://bugs.launchpad.net/bugs/1742364

Title:
  Updated microcode for Spectre fix

Status in intel:
  New
Status in intel-microcode package in Ubuntu:
  New

Bug description:
  Intel have finally released the updated microcode for the Spectre bug.

  See https://downloadcenter.intel.com/download/27431/Linux-Processor-
  Microcode-Data-File?v=t

  From the release note:
  Intel Processor Microcode Package for Linux
  20180108 Release

  -- Updates upon 20171117 release --
  IVT C0		(06-3e-04:ed) 428->42a
  SKL-U/Y D0	(06-4e-03:c0) ba->c2
  BDW-U/Y E/F	(06-3d-04:c0) 25->28
  HSW-ULT Cx/Dx	(06-45-01:72) 20->21
  Crystalwell Cx	(06-46-01:32) 17->18
  BDW-H E/G	(06-47-01:22) 17->1b
  HSX-EX E0	(06-3f-04:80) 0f->10
  SKL-H/S R0	(06-5e-03:36) ba->c2
  HSW Cx/Dx	(06-3c-03:32) 22->23
  HSX C0		(06-3f-02:6f) 3a->3b
  BDX-DE V0/V1	(06-56-02:10) 0f->14
  BDX-DE V2	(06-56-03:10) 700000d->7000011
  KBL-U/Y H0	(06-8e-09:c0) 62->80
  KBL Y0 / CFL D0	(06-8e-0a:c0) 70->80
  KBL-H/S B0	(06-9e-09:2a) 5e->80
  CFL U0		(06-9e-0a:22) 70->80
  CFL B0		(06-9e-0b:02) 72->80
  SKX H0		(06-55-04:b7) 2000035->200003c
  GLK B0		(06-7a-01:01) 1e->22

  These should be released ASAP since they will be needed for the
  upcoming Spectre fixes in the Kernel.

To manage notifications about this bug go to:
https://bugs.launchpad.net/intel/+bug/1742364/+subscriptions