[Git][security-tracker-team/security-tracker][master] Expand notes for CVE-2020-0551/LVI

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a6cec238 by Salvatore Bonaccorso at 2020-03-10T21:11:41+01:00
Expand notes for CVE-2020-0551/LVI

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -25853,7 +25853,11 @@ CVE-2020-0551 [Load Value Injection]
 	NOTE: https://software.intel.com/security-software-guidance/software-guidance/load-value-injection
 	NOTE: https://software.intel.com/security-software-guidance/insights/deep-dive-load-value-injection
 	NOTE: https://xenbits.xen.org/xsa/advisory-315.html
-	NOTE: No mitigation will provided by this issue in software.
+	NOTE: https://lviattack.eu/
+	NOTE: No mitigation will provided by this issue in software, primarily impacts Intel SGX
+	NOTE: binutils/toolchain updates will include a patch that optionally emits lfence
+	NOTE: instructions in problematic situations (but have performance impact), cf.
+	NOTE: https://sourceware.org/pipermail/binutils/2020-March/110175.html
 CVE-2020-0550
 	RESERVED
 CVE-2020-0549 (Cleanup errors in some data cache evictions for some Intel(R) Processo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6cec2384183c1eaec84d2466b71985eb1f3e916

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6cec2384183c1eaec84d2466b71985eb1f3e916
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200310/4854fbbb/attachment.html>