USN-3531-2
intel-microcode regression
USN-3531-1 updated Intel microcode to the 20180108 release. Regressions were discovered in the microcode updates which could cause system instability on certain hardware platforms. At the request of Intel, we have reverted to the previous packaged microcode version, the 20170707 release.
Original advisory details:
It was discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2017-5715)
This update provides the microcode updates required for the corresponding Linux kernel updates.
What each source reports
OSV No score
intel-microcode regression
USN-3531-1 updated Intel microcode to the 20180108 release. Regressions were discovered in the microcode updates which could cause system instability on certain hardware platforms. At the request of Intel, we have reverted to the previous packaged microcode version, the 20170707 release.
Original advisory details:
It was discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2017-5715)
This update provides the microcode updates required for the corresponding Linux kernel updates.
- Record
USN-3531-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
intel-microcodeUbuntu:14.04:LTS |
before 3.20180108.0+really20170707ubuntu14.04.1, plus listed versions 1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu23.20180108.0~ubuntu14.04.2 |
3.20180108.0+really20170707ubuntu14.04.1 |
intel-microcodeUbuntu:16.04:LTS |
before 3.20180108.0+really20170707ubuntu16.04.1, plus listed versions 3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.2 |
3.20180108.0+really20170707ubuntu16.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-3531-2 is a vulnerability with no CVSS score yet in intel-microcode, published January 22, 2018. No source lists public exploit code. Fixed in intel-microcode 3.20180108.0+really20170707ubuntu14.04.1.