[vc_row padding_top=”150px” padding_bottom=”150px” inner_container=”true” no_margin=”true” bg_image=”8553″ bg_video=”” class=”” style=””][vc_column fade_animation_offset=”45px” width=”1/1″][mpc_textblock content_width=”100″ font_preset=”mpc_preset_29″ font_color=”#ffffff” font_size=”42″ font_line_height=”1.5″ font_transform=”none” font_align=”left”]MDS security issue[/mpc_textblock][/vc_column][/vc_row][vc_row padding_top=”100px” padding_bottom=”0px” inner_container=”true” no_margin=”true” bg_video=”” class=”” style=”” bg_color=”#ffffff”][vc_column fade_animation_offset=”45px” width=”1/2″]

Microarchitectural data sampling (MDS) is a sub-class of previously disclosed speculative execution side channel vulnerabilities and is comprised of 4 CVE (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130 and CVE-2019-11091). Under certain conditions, MDS provides a program the potential means to read data that program otherwise would not be able to see. MDS techniques are based on a sampling of data leaked from small structures within the CPU using a locally executed speculative execution side channel. Practical exploitation of MDS is a very complex undertaking. MDS does not, by itself, provide an attacker with a way to choose the data that is leaked.

[/vc_column][vc_column fade_animation_offset=”45px” width=”1/2″]

QCT has been working with Intel to identify mitigations that enhance platform resiliency to this vulnerability. Intel suggests these updates help ensure our customers have access to the protections necessary for traditional IT and cloud services environments.

Please see affacted product, mitigation option and detailed info in below tables.

[/vc_column][/vc_row][vc_row padding_top=”50px” padding_bottom=”0px” inner_container=”true” no_margin=”true” bg_video=”” class=”” style=”” bg_color=”#ffffff”][vc_column fade_animation_offset=”45px” width=”1/1″][mpc_textblock content_width=”100″ font_preset=”mpc_preset_5″ font_color=”#555555″ font_size=”16″ font_line_height=”1.5″ font_transform=”none” font_align=”inherit”]Reference

• Intel Side Channel Vulnerability MDS: https://www.intel.com/content/www/us/en/architecture-and-technology/mds.html
• Intel Intel Security advisory (Intel-SA-00233) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html
• Intel Software Security Guidance for developers  https://software.intel.com/security-software-guidance/software-guidance/microarchitectural-data-sampling

 

[/mpc_textblock][/vc_column][/vc_row][vc_row padding_top=”50px” padding_bottom=”50px” inner_container=”true” no_margin=”true” bg_video=”” class=”” style=”” bg_color=”#ffffff”][vc_column fade_animation_offset=”45px” width=”1/1″][/vc_column][/vc_row][vc_row padding_top=”50px” padding_bottom=”50px” inner_container=”true” no_margin=”true” bg_video=”” class=”” style=”” bg_color=”#ffffff”][vc_column fade_animation_offset=”45px” width=”5/6″][/vc_column][vc_column fade_animation_offset=”45px” width=”1/6″ id=”” class=”” style=”vertical-align: text-bottom;”][/vc_column][/vc_row][vc_row padding_top=”0px” padding_bottom=”0px” inner_container=”true” no_margin=”true” bg_video=”” class=”” style=”” bg_color=”#ffffff”][vc_column fade_animation_offset=”45px” width=”5/6″]

[Remark]
Regarding Customized BIOS, please contact your account sales for release schedule and BIOS with microcode.

[/vc_column][vc_column fade_animation_offset=”45px” width=”1/6″][/vc_column][/vc_row]