MeltdownSpectre

Meltdown and Spectre security flaw : Informations for Bull HPC Servers

On January 3, 2018, CVE-2017-5753, CVE-2017-5715 and CVE-2017-5754 have been disclosed announcing speculative execution and indirect branch prediction vulnerabilities with many moderm microprocessors commonly referred to as Meldon and Spectre. There are known through the following name:

Variant 1: Bounds Check Bypass – CVE-2017-5753

Variant 2: Branch Target Injection – CVE-2017-5715

Variant 3: Rogue Data Cache Load (Meltdown) – CVE-2017-5754

Intel Security Advisory : INTEL-SA-00088.

Mitigations for Variant 1 and Variant 3 require a software update.

Mitigations for Variant 2 require a software update and new processor microcode usually provided with new BIOS.

On May 21, 2018, CVE-2018-3639 and CVE-2018-3640 have been disclosed annoucing new variant of the Spectre/Meldown vulnerabilities.

Variant 3a: Rogue System Register Read – CVE-2018-3640

Variant 4: Speculative Store Bypass – CVE-2018-3639

Intel Security Advisory : INTEL-SA-00115.

Mitigations for Variant 3a are only available with a new processor microcode. There is no software.

Mitigation for Variant 4 require a new processor microcode and a software update

Iinformation on software and BIOS to mitigate variant 3a and 4 will be added as information becomes available.

Software updates for Spectre variant 1, 2 and 3:

All the FIXs for SCS5 R1 , SCS4 AE4 and Red Hat Erratas have been released and can be downloaded from the Bull HPC software distribution server.

For any other Operating System, customers are advised to contact their OS distributor.

BIOS updates for Spectre & Meltdown:

BIOS availability for bullx S, bullx R, bullx B, bullx DLC and Bull Sequana

If you have any issues to access software or BIOS or if you have an issue to install them, please open a ticket to Atos SMILE

https://tickets.bull.com/