Security Advisory - CPU Vulnerabilities 'Meltdown' and 'Spectre'
- SA No:huawei-sa-20180106-01-cpu
- Initial Release Date: 2018-01-06
- Last Release Date: 2021-12-15
Security researchers disclosed two groups of CPU vulnerabilities "Meltdown" and "Spectre". In some circumstances, a local attacker could exploit these vulnerabilities to read memory information belonging to other processes or other operating system kernel. (Vulnerability ID: HWPSIRT-2018-01001, HWPSIRT-2018-01002, HWPSIRT-2018-01003)
This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-5715, CVE-2017-5753 and CVE-2017-5754.
Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180106-01-cpu-en
Carrier customers can log into Huawei Support website to obtain information about affected products and solutions: http://support.huawei.com/carrier/docview!docview?nid=NEWS2100007596&path=PBI1-8132379
|
Product Name |
Affected Version |
Resolved Product and Version |
|
1288H V5/ 2288H V5 |
Earlier than V100R005C00SPC110 (BIOS V059) versions |
V100R005C00SPC110 (BIOS V059) |
|
2488 V5 |
Earlier than V100R005C00SPC301 (BIOS V080) versions |
V100R005C00SPC301 (BIOS V080) |
|
2488H V5 |
Earlier than V100R005C00SPC101 (BIOS V080) versions |
V100R005C00SPC101 (BIOS V080) |
|
5288 V3 |
V100R003C00 |
V100R003C00SPC620 |
|
9032 |
V100R001C20 |
V100R001C30SPC110 |
|
Access Router: AR100/ AR100-S/ AR110-S/ AR120/ AR120-S/ AR1220C/ AR1500/ AR151-S2/ AR160 （Exclude AR160F）/ AR160-S （Exclude AR160F-S）/ AR2204-XGE/ AR3600/ SRG1300/ SRG1320E |
Earlier than V200R009C00SPC500 versions |
V200R009C00SPC500 |
|
Agile Controller-Campus |
V100R001C00 |
V100R003C30SPC103 |
|
V100R002C00 |
||
|
V100R002C10 |
||
|
BH620 V2 |
Versions earlier than V100R002C00SPC302 (BIOS V370) |
V100R002C00SPC302(BIOS V370) |
|
BH621 V2 |
Versions earlier than V100R002C00SPC301 (BIOS V370) |
V100R002C00SPC301 (BIOS V370) |
|
BH622 V2 |
Versions earlier than V100R002C00SPC309 (BIOS V521) |
V100R002C00SPC309 (BIOS V521) |
|
BH640 V2 |
Versions earlier than V100R002C00SPC307 (BIOS V521) |
V100R002C00SPC307 (BIOS V521) |
|
CH121 |
Earlier than V100R001C00SPC305 (BIOS V521) versions |
V100R001C00SPC305 (BIOS V521) |
|
CH121 V3 |
Earlier than V100R001C00SPC255 (BIOS V387) versions |
V100R001C00SPC255 (BIOS V387) |
|
CH121 V5 |
Earlier than V100R001C00SPC122 (BIOS V059) versions |
V100R001C00SPC122 (BIOS V059) |
|
CH121H V3 |
Earlier than V100R001C00SPC115 (BIOS V387) versions |
V100R001C00SPC115 (BIOS V387) |
|
CH121L V3 |
Earlier than V100R001C00SPC155 (BIOS V387) versions |
V100R001C00SPC155 (BIOS V387) |
|
CH121L V5 |
Earlier than V100R001C00SPC120 (BIOS V059) versions |
V100R001C00SPC120 (BIOS V059) |
|
CH140 |
Earlier than V100R001C00SPC325 (BIOS V521) versions |
V100R001C00SPC325 (BIOS V521) |
|
CH140 V3 |
Earlier than V100R001C00SPC175 (BIOS V387) versions |
V100R001C00SPC175 (BIOS V387) |
|
CH140L V3 |
Earlier than V100R001C00SPC155 (BIOS V387) versions |
V100R001C00SPC155 (BIOS V387) |
|
CH220 |
Earlier than V100R001C00SPC305 (BIOS V521) versions |
V100R001C00SPC305 (BIOS V521) |
|
CH220 V3 |
Earlier than V100R001C00SPC255 (BIOS V387) versions |
V100R001C00SPC255 (BIOS V387) |
|
CH221 |
Earlier than V100R001C00SPC305 (BIOS V521) versions |
V100R001C00SPC305 (BIOS V521) |
|
CH222 |
Earlier than V100R001C00SPC305 (BIOS V521) versions |
V100R001C00SPC305 (BIOS V521) |
|
CH222 V3 |
Earlier than V100R001C00SPC255 (BIOS V387) versions |
V100R001C00SPC255 (BIOS V387) |
|
CH225 V3 |
Earlier than V100R001C00SPC155 (BIOS V387) versions |
V100R001C00SPC155 (BIOS V387) |
|
CH226 V3 |
Earlier than V100R001C00SPC175 (BIOS V387) versions |
V100R001C00SPC175 (BIOS V387) |
|
CH240 |
Earlier than V100R001C00SPC305 (BIOS V521) versions |
V100R001C00SPC305 (BIOS V521) |
|
CH242 V3 |
Earlier than V100R001C00SPC325 (BIOS V810 for CH242 V3 DDR4, BIOS V355 for CH242 V3) versions |
V100R001C00SPC325 (BIOS V810 for CH242 V3 DDR4, BIOS V355 for CH242 V3) |
|
CH242 V5 |
Earlier than V100R001C00SPC111 (BIOS V080) versions |
V100R001C00SPC111 (BIOS V080) |
|
DH320 V2 |
Earlier than V100R001C00SPC109 (BIOS V518) versions |
V100R001C00SPC109 (BIOS V518) |
|
DH321 V2 |
Versions earlier than V100R002C00SPC303 (BIOS V521) |
V100R002C00SPC303 (BIOS V521) |
|
DH620 V2 |
Versions earlier than DH620 V2 V100R001C00SPC202 (BIOS V521) |
V100R001C00SPC202 (BIOS V521) |
|
DH621 V2 |
Versions earlier than V100R001C00SPC202 (BIOS V521) |
V100R001C00SPC202 (BIOS V521) |
|
DH626 V2 |
Versions earlier than V100R002C00SPC202 (BIOS V521) |
V100R002C00SPC202 (BIOS V521) |
|
DH628 V2 |
Versions earlier than V100R001C00SPC201 (BIOS V603) |
V100R001C00SPC201 (BIOS V603) |
|
ECC800 |
ECC500V600R002C00SPC300 |
V100R002C10SPC300 |
| Earlier than V100R002C10SPC200 |
||
| V100R001C10 |
||
|
V100R001C10SPC100 |
||
| V100R001C30 |
||
|
V100R001C30SPC100 |
||
|
V100R001C30SPC200 |
||
| V100R001C40 |
||
|
V100R001C40SPC100 |
||
|
V100R001C40SPC200 |
||
|
V100R001C40SPC300 |
||
|
V100R001C40SPC400 |
||
| V100R001C41 |
||
|
V100R001C41SPC100 |
||
|
V100R001C41SPC200 |
||
|
V100R001C41SPC201 |
||
|
V100R001C41SPC202 |
||
| V100R002C00 |
||
|
V100R002C00SPC010 |
||
|
V100R002C00SPC020 |
||
|
V100R002C00SPC100 |
||
|
V100R002C00SPC101 |
||
|
V100R002C00SPC103 |
||
|
V100R002C00SPC105 |
||
|
V100R002C00SPC110 |
||
|
V100R002C10SPC100 |
||
|
V100R002C10SPC110 |
||
|
V100R002C10SPC130 |
||
|
V100R002C10SPC131 |
||
|
EulerOS |
EulerOS V2.0SP1 EulerOS V2.0SP2 |
kernel-3.10.0-229.49.1.170 kernel-3.10.0-327.59.59.46.h44 |
|
FusionCloud |
FusionCloud 2.0.5(KVM) |
FusionSphere OpenStack V100R006C10SPC511 |
|
FusionCloud 2.0.6(KVM) |
||
|
FusionCloud 6.0.0(KVM) |
FusionSphere OpenStack V100R006C10CP0001 |
|
|
FusionCompute |
6.3.0 |
V100R006C10CP0001 |
|
V100R006C00 |
||
|
V100R006C10 |
||
|
FusionCube |
V100R002C02 |
FusionCube Tool V100R002C02SPC308 |
|
FusionSphere |
FusionSphere 5.1（XEN） |
FusionCompute V100R005C10CP7003 |
|
FusionSphere 6.0U1(XEN) |
FusionCompute V100R006C00U1CP0001 |
|
|
FusionSphere 6.1(XEN) |
FusionCompute V100R006C10CP0001 |
|
|
FusionSphere OpenStack |
V100R005C00 |
V100R006C10SPC511 |
|
V100R005C10 |
||
|
V100R006C00 |
||
|
V100R006C10 |
||
|
GTSOFTX3000 |
V200R002C20 |
CGP V200R002C20SPC600 |
|
IOT Gateway: AR500/ AR510/ AR532/ AR550C/ AR550E/ SRG550C |
Earlier than V200R009C00SPC500 versions |
V200R009C00SPC500 |
|
Kunlun 9008 |
Earlier than V100R001C30SPC103 (BIOS V320) versions |
V100R001C30SPC103 (BIOS V320) |
|
Kunlun 9016 |
Earlier than V100R001C30SPC103 (BIOS V320) versions |
V100R001C30SPC103 (BIOS V320) |
|
Kunlun 9032 |
Earlier than V100R001C30SPC103 (BIOS V320) versions |
V100R001C30SPC103 (BIOS V320) |
|
MateBook (HZ-W09/ HZ-W19/ HZ-W29) |
Earlier than BIOS 1.51 versions |
BIOS 1.51 |
|
MateBook B200/ MateBook D (PL-W09/ PL-W19/ PL-W29) |
Earlier than BIOS 1.20 versions |
BIOS 1.20 |
|
MateBook D (MRC-W10/ MRC-W50/ MRC-W60) |
Earlier than BIOS 1.15 versions |
BIOS 1.15 |
|
MateBook E (BL-W09/ BL-W19) |
Earlier than BIOS 2.02 versions |
BIOS 2.02 |
|
MateBook X (WT-W09/ WT-W19) |
Earlier than BIOS 2.02 versions |
BIOS 2.02 |
|
NFVI |
NFVI 6.1.5(KVM) |
FusionSphere OpenStack V100R006C10SPC511 |
|
OceanStor 18500 V3 |
V300R003C00 |
OceanStor 18800 V3 V300R006C10SPC101 |
|
OpsMonitor |
1.3.5 |
IaaS Common Component 6.1.30.5 |
|
RH1288 V2 |
Versions earlier than V100R002C00SPC640 (BIOS 520) |
V100R002C00SPC640 (BIOS 520) |
|
RH1288 V3 |
V100R003C00 |
V100R003C00SPC638 |
|
RH1288A V2 |
Versions earlier than V100R002C00SPC710 (BIOS V521) |
V100R002C00SPC710 (BIOS V521) |
|
RH2265 V2 |
V100R002C00 |
RH2285H V2 V100R002C00SPC509 |
|
RH2268 V2 |
V100R002C00 |
RH2288E V2 V100R002C00SPC301 |
|
RH2285 V2 |
Versions earlier than V100R002C00SPC511 (BIOS V521) |
V100R002C00SPC511 (BIOS V521) |
|
RH2285H V2 |
Versions earlier than V100R002C00SPC511 (BIOS V521) |
V100R002C00SPC511 (BIOS V521) |
|
RH2288 V2 |
Versions earlier than V100R002C00SPC610 (BIOS 520) |
V100R002C00SPC610 (BIOS 520) |
|
RH2288 V3 |
V100R003C00 |
V100R003C00SPC646 |
|
RH2288A V2 |
Versions earlier than V100R002C00SPC710 (BIOS V521) |
V100R002C00SPC710 (BIOS V521) |
|
RH2288E V2 |
V100R002C00 |
V100R002C00SPC301 |
|
RH2288H V2 |
Versions earlier than V100R002C00SPC620 (BIOS 520) |
V100R002C00SPC620 (BIOS 520) |
|
RH2485 V2 |
Versions earlier than V100R002C00SPC713 (BIOS V521) |
V100R002C00SPC713 (BIOS V521) |
|
RH5885 V2 |
V100R001C00 |
V100R001C02SPC305 |
|
RH5885 V3 |
V100R003C00 |
V100R003C10SPC119 |
|
RH5885H V3 |
V100R003C00 |
V100R003C00SPC217 |
|
V100R003C10 |
V100R003C10SPC119 |
|
|
RH8100 V3 |
V100R003C00 |
V100R003C00SPC226 |
|
SMC2.0 |
V100R003C10 |
V600R006C10SPC300 |
|
V500R002C00 |
||
|
SRG1300 |
V200R006C00 |
AR3200 V200R009C00SPC500 |
|
V200R006C10 |
||
|
V200R006C11 |
||
|
V200R006C12 |
||
|
V200R006C13 |
||
|
V200R006C15 |
||
|
V200R006C16 |
||
|
V200R006C17 |
||
|
V200R007C00 |
||
|
V200R007C01 |
||
|
V200R007C02 |
||
|
V200R007C05 |
||
|
V200R007C06 |
||
|
V200R008C00 |
||
|
V200R008C10 |
||
|
V200R008C20 |
||
|
V200R008C30 |
||
|
V200R008C50 |
||
|
V200R009C00 |
||
|
SRG500 |
V200R008C50 |
AR3200 V200R009C00SPC500 |
|
V200R009C00 |
||
|
UC Audio Recorder |
V100R001C02 |
CloudUSM V600R006C10SPC300 |
|
VP9630 |
V600R006C10 |
VP9660 V600R006C10SPC200 |
|
VP9660 |
V600R006C10 |
V600R006C10SPC200 |
|
XH320 V2 |
Earlier than V100R001C00SPC205(BIOS V518) versions |
V100R001C00SPC205 (BIOS V518) |
|
XH321 V2 |
Earlier than V100R001C00SPC205(BIOS V518) versions |
V100R001C00SPC205 (BIOS V518) |
|
XH321 V3 |
Earlier than V100R003C00SPC502 (BIOS V387) versions |
V100R003C00SPC502 (BIOS V387) |
|
XH321 V5 |
Versions earlier than V100R005C00SPC501 (BIOS V095) |
V100R005C00SPC501 (BIOS V095) |
|
XH620 V3 |
Earlier than V100R003C00SPC625 (BIOS V387) versions |
V100R003C00SPC625 (BIOS V387) |
|
XH621 V2 |
Earlier than V100R001C00SPC205 (BIOS V518) versions |
V100R001C00SPC205 (BIOS V518) |
|
XH622 V3 |
Earlier than V100R003C00SPC623 (BIOS V387) versions |
V100R003C00SPC623 (BIOS V387) |
|
XH628 V3 |
Earlier than V100R003C00SPC623 (BIOS V387) versions |
V100R003C00SPC623 (BIOS V387) |
|
eAPP610 |
V100R004C10 |
V100R004C10SPC800 |
|
eCNS210 |
V100R005C00 |
V100R005C00SPC530 |
|
eCNS280_TD |
V100R005C00 |
V100R005C10 |
| eSE620X vESC |
V100R001C00SPC300 |
V100R001C00SPC510 |
| V100R001C00SPC310 |
||
|
eSE620X vESS |
V100R001C00 |
CGP V200R018C10SPC313 |
| eSight |
V300R007C00 |
V300R010C00SPC600 |
|
eSpace 8950 |
V200R003C00 |
eSpace8950 eSpace8950 V200R003C30SPC500 |
|
eSpace ECS |
V300R001C00 |
CloudECS V600R006C10SPC200 |
|
eSpace UMS |
V200R002C00 |
Unified Messaging System V600R006C10SPC200 |
|
eSpace USM |
V300R001C00 |
V300R001C00SPC |
| elog |
V200R007C10 |
V2R7C10SPC202 |
|
iBattery |
iBattery_V276 |
iBattery_V297B014 included in UPS5000 V300R002C10SPC409 |
|
iBattery_V281 |
iBattery_V297B014 included in UPS5000 V300R002C10SPC406 |
|
|
iBattery_V285 |
iBattery_V297B014 included in UPS5000 V300R002C10SPC407 |
|
|
iBattery_V286 |
iBattery_V297B014 included in UPS5000 V300R002C10SPC408 |
|
|
iBattery_V289 |
iBattery_V297B014 included in UPS5000 V300R002C10SPC405 |
|
|
iBattery_V291 |
iBattery_V297B014 included in UPS5000 V300R002C10SPC404 |
|
|
iBattery_V295 |
iBattery_V297B014 included in UPS5000 V300R002C10SPC403 |
|
|
iBattery_V296 |
iBattery_V297B014 included in UPS5000 V300R002C10SPC402 |
|
|
iBattery_V297B003 |
iBattery_V297B014 included in UPS5000 |
|
|
iManager NetEco |
V600R008C30 |
iManager NetEco 6000-TOOL_Linux_AutoInstall V600R007C00SPC250 |
|
iManager NetEco 6000 |
V600R008C00 |
iManager NetEco 6000-TOOL_Linux_AutoInstall iManager NetEco 6000-TOOL_Linux_AutoInstall V600R007C00SPC250 |
An attacker could exploit these vulnerabilities to read memory information belonging to other processes or other operating system kernel.
The vulnerability classification has been performed by using the CVSSv3 scoring system (https://www.first.org/cvss/specification-document) .
CVE-2017-5715:
Base Score: 8.2 (AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N)
Temporal Score: 7.6 (E:F/RL:O/RC:C)
CVE-2017-5753 & CVE-2017-5754:
Base Score: 7.1 (AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)
Temporal Score: 6.6 (E:F/RL:O/RC:C)
1. Prerequisite:
An attacker must be able to run crafted code on an affected device.
2. Attacking procedure:
In some circumstances, a local attacker could exploit these vulnerabilities to read memory information belonging to other processes or other operating system kernel.
Customers should contact Huawei TAC (Huawei Technical Assistance Center) to request the upgrades. For TAC contact information, please refer to Huawei worldwide website at http://www.huawei.com/en/psirt/report-vulnerabilities.
These vulnerabilities were publicly disclosed.
2021-12-15 V3.2 UPDATED Updated the affected version and fix version information
2021-07-07 V3.1 UPDATED Updated the affected version and fix version information
2021-05-27 V3.0 UPDATED Updated the affected version and fix version information
2021-01-14 V2.9 UPDATED Updated the affected version and fix version information
2020-08-12 V2.8 UPDATED Updated the affected version and fix version information
2020-04-15 V2.7 UPDATED Updated the affected version and fix version information
2019-03-05 V2.6 UPDATED Updated the affected version and fix version information
2018-11-07 V2.5 UPDATED Updated the affected version and fix version information
2018-04-27 V2.4 UPDATED Updated the affected version and fix version information
2018-04-03 V2.3 UPDATED Updated the affected version and fix version information
2018-03-21 V2.2 UPDATED Updated the affected version and fix version information
2018-03-19 V2.1 UPDATED Updated the affected version and fix version information
2018-03-15 V2.0 UPDATED Updated the affected version and fix version information
2018-03-14 V1.9 UPDATED Updated the affected version and fix version information
2018-03-12 V1.8 UPDATED Updated the Note and FAQ information
2018-03-01 V1.7 UPDATED Updated the affected version and fix version information
2018-02-27 V1.6 UPDATED Updated the summary information
2018-02-26 V1.5 UPDATED Updated the affected version and Note information
2018-02-01 V1.4 UPDATED Updated the recommended version and Note information
2018-01-24 V1.3 UPDATED Updated the affected version and Note information
2018-01-19 V1.2 UPDATED Updated the Note information
2018-01-11 V1.1 UPDATED Updated the affected version
2018-01-06 V1.0 INITIAL
[1]The description of the performance test for 1288H V5/ 2288H V5/ 2488 V5/ 2488H V5/ 5288 V3/ CH121/ CH121 V3/ CH220 V3/ CH222 V3/ CH121 V5/ CH121H V3/ CH121L V3/ CH140L V3/ CH225 V3/ CH121L V5/ CH140/ CH140 V3/ CH226 V3/ CH220/ CH221/ CH222/ CH240/ CH242 V3/ CH242 V5/ Kunlun 9008/9016/9032/ RH1288 V3/ RH2288 V3/ RH2288H V3/ XH321 V3/ XH620 V3/ XH622 V3/ XH628 V3 products.
Intel released the performance test result of two-socket Intel Xeon Platinum 81xx processors on January 18:
The performance test results for patches in major OSs are as follows:
Microsoft: https://cloudblogs.microsoft.com/microsoftsecure/2018/01/09/understanding-the-performance-impact-of-spectre-and-meltdown-mitigations-on-windows-systems
Red Hat: https://access.redhat.com/articles/3307751
SUSE: https://www.suse.com/c/meltdown-spectre-performance/
After the Intel microcode patch is installed, the performance impact is closely related to the operating system and running services. Customers are advised to verify and assess the performance based on running services.
Huawei adheres to protecting the ultimate interests of users with best efforts and the principle of responsible disclosure and deal with product security issues through our response mechanism.
To enjoy Huawei PSIRT services and obtain Huawei product vulnerability information, please visit http://www.huawei.com/en/psirt.
To report a security vulnerability in Huawei products and solutions, please send it to PSIRT@huawei.com. For details, please visit http://www.huawei.com/en/psirt/report-vulnerabilities.
