MA47305 - LIC Mitigate Spectre and Meltdown vulnerabilities in programs

APAR (Authorized Program Analysis Report)

Abstract

LIC Mitigate Spectre and Meltdown vulnerabilities in programs

Error Description

IBM has released this PTF in response to CVE-2017-5753,        
CVE-2017-5715, CVE-2017-5754, and CVE-2018-3639.                

Problem Summary

IBM has released this PTF in response to CVE-2017-5753,        
CVE-2017-5715, CVE-2017-5754, and CVE-2018-3639.                

Problem Conclusion

Spectre and Meltdown vulnerabilities could allow untrusted      
programs to obtain unauthorized access to data as described in  
CVE-2017-5753, CVE-2017-5715, CVE-2017-5754, and CVE-2018-3639.
These vulnerabilities can be mitigated by applying this PTF and
taking further actions described in the Special Instructions    
section. Run-time performance may be affected if you choose to  
take those further actions.                                    
                                                               
This PTF should be applied along with all other PTFs provided in
response to these vulnerabilities. See the IBM i Security      
Bulletin for that list of PTFs:                                
www.ibm.com/support/docview.wss?uid=nas8N1022433                

Temporary Fix

Comments

Spectre and Meltdown vulnerabilities could allow untrusted      
programs to obtain unauthorized access to data as described in  
CVE-2017-5753, CVE-2017-5715, CVE-2017-5754, and CVE-2018-3639.
These vulnerabilities can be mitigated by applying this PTF and
taking further actions described in the Special Instructions    
section. Run-time performance may be affected if you choose to  
take those further actions.                                    
                                                               
This PTF should be applied along with all other PTFs provided in
response to these vulnerabilities. See the IBM i Security      
Bulletin for that list of PTFs:                                
www.ibm.com/support/docview.wss?uid=nas8N1022433                

Circumvention

PTFs Available

Affected Modules

Affected Publications

Summary Information

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021, 2022, 2023, 2024 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information