[Bug 1201351] New: MMIO Stale Data CPU bug present and SMT on, data leak possible
http://bugzilla.opensuse.org/show_bug.cgi?id=1201351 Bug ID: 1201351 Summary: MMIO Stale Data CPU bug present and SMT on, data leak possible Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: ada.lovelace@gmx.de QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:101.0) Gecko/20100101 Firefox/101.0 Build Identifier: I have updated openSUSE Tumbleweed (incl. firmware) today on my Lenovo Thinkpad T14. Then I wanted to check, whether all is fine again (after a former bug). The dmesg output is saying the following today: [ 0.116366] smp: Bringing up secondary CPUs ... [ 0.116366] x86: Booting SMP configuration: [ 0.116366] .... node #0, CPUs: #1 #2 #3 #4 [ 0.117480] MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_st... for more details. [ 0.117480] #5 #6 #7 [ 0.121058] smp: Brought up 1 node, 8 CPUs It seems, that data leaks are possible at the moment. Reproducible: Always Steps to Reproduce: 1. Hardware: Lenovo ThinkPad T14 Gen 1 with Intel�� Core��� i7-10510U �� 8 2. Latest firmware updates and update of openSUSE Tumbleweed 3. dmesg output is referencing data leak Actual Results: data leak is possible Expected Results: No security issues -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1201351 http://bugzilla.opensuse.org/show_bug.cgi?id=1201351#c1 --- Comment #1 from Sarah Kriesch <ada.lovelace@gmx.de> --- Created attachment 860093 --> http://bugzilla.opensuse.org/attachment.cgi?id=860093&action=edit dmesg -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1201351 Sarah Kriesch <ada.lovelace@gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Hardware|Other |x86-64 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1201351 Sarah Kriesch <ada.lovelace@gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Found By|--- |Community User -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1201351 http://bugzilla.opensuse.org/show_bug.cgi?id=1201351#c2 --- Comment #2 from Sarah Kriesch <ada.lovelace@gmx.de> --- Created attachment 860094 --> http://bugzilla.opensuse.org/attachment.cgi?id=860094&action=edit messages -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1201351 http://bugzilla.opensuse.org/show_bug.cgi?id=1201351#c3 --- Comment #3 from Sarah Kriesch <ada.lovelace@gmx.de> --- Created attachment 860095 --> http://bugzilla.opensuse.org/attachment.cgi?id=860095&action=edit cpuinfo /proc/cpuinfo provides more information about security issues. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1201351 Sarah Kriesch <ada.lovelace@gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P2 - High -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com