Debian 9886 Published by

A linux-5.10 security update has been released for Debian GNU/Linux 9 Extended LTS to provide updated CPU microcode.

ELA-947-1 linux-5.10 security update

Package : linux-5.10
Version : 5.10.179-5~deb9u1 (stretch)

Related CVEs :

Daniel Moghimi discovered Gather Data Sampling (GDS), a hardware
vulnerability for Intel CPUs which allows unprivileged speculative
access to data which was previously stored in vector registers.

This mitigation requires updated CPU microcode provided in the
intel-microcode package.

Daniel Trujillo, Johannes Wikner and Kaveh Razavi discovered
INCEPTION, also known as Speculative Return Stack Overflow (SRSO),
a transient execution attack that leaks arbitrary data on all AMD
Zen CPUs. An attacker can mis-train the CPU BTB to predict non-
architectural CALL instructions in kernel space and use this to
control the speculative target of a subsequent kernel RET,
potentially leading to information disclosure via a speculative

ELA-947-1 linux-5.10 security update