Loading

×Sorry to interrupt
This page has an error. You might just need to refresh it.
[NoErrorObjectAvailable] Uncaught ReferenceError: addCTracking is not defined
Failing descriptor: {markup://c:KM_ArticleThemeLayout}

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

My Subscriptions

Loading

Knowledge Base

VMware Response to Speculative Execution security issues, CVE-2018-3639 and CVE-2018-3640 (54951)

Last Updated: 2/27/2024Categories: SecurityTotal Views: 50403Language:
Chinese (Simplified)JapaneseEnglish

7 like this article

Subscribe to get an email
newsletter with new updates

7 people found this helpful Please provide article feedback:

Purpose

The purpose of this article is to respond to the security issues related to speculative execution described by CVE-2018-3639 (Speculative Store Bypass) and CVE-2018-3640 (Rogue System Register Read) in modern-day processors as they apply to VMware. Because there will be multiple documents necessary to respond to these issues, consider this document as the centralized source of truth for these issues.

The Update History section of this document will be revised when there is a significant change to any of the related documentation. Click Subscribe to Article in the Actions box to be alerted when new information is added to this document and sign up at our Security-Announce mailing list to receive new and updated VMware Security Advisories.

Background

To assist in understanding Speculative Execution vulnerabilities, VMware previously defined the following categories in KB52245 - review this knowledge base article for an explanation of these categories:

Hypervisor-Specific Mitigation

Hypervisor-Assisted Guest Mitigation

Operating System-Specific Mitigations

With the disclosure of CVE-2018-3640 a 4th category has been defined:

Microcode Mitigations

Microcode Mitigations are applied to a system’s processor(s) by a microcode update from the hardware vendor. These mitigations may not require hypervisor or guest operating system updates to be effective. Nonetheless, ESXi plans to include microcode updates that contain such mitigations when they become available, as a convenience to our customers.

Mitigation of CVE-2018-3639 and CVE-2018-3640

Mitigation of CVE-2018-3639 (Speculative Store Bypass) requires both Hypervisor-Assisted Guest Mitigations and Operating System-Specific Mitigations.

Mitigation of CVE-2018-3640 (Rogue System Register Read) requires Microcode Mitigations.

Note:

Based on current evaluations, we do not believe that CVE-2018-3639 or CVE-2018-3640 could allow for VM to VM or Hypervisor to VM Information disclosure. Thus, Hypervisor-Specific Mitigations are not required.

Resolution

CVE-2018-3639 (Speculative Store Bypass)

Hypervisor-Assisted Guest Mitigations

VMware updates that enable Hypervisor-Assisted Guest Mitigations for CVE-2018-3639 are documented in VMware Security Advisory VMSA-2018-0012.1. The required Intel microcode updates are documented in VMware Knowledge Base articles listed in the same advisory. The combination of updates and Intel microcode will expose the Speculative-Store-Bypass-Disable (SSBD) control bit to guest operating systems. Detailed instructions on enabling Hypervisor-Assisted Guest Mitigations for CVE-2018-3639 are found in VMware Knowledge base artcile KB55111.

Operating System-Specific Mitigations

VMware has investigated the impact that CVE-2018-3639 may have on VMware Virtual Appliances, and while investigations are ongoing we have not found any evidence that VMware Virtual Appliances are affected by this issue.

VMware recommends contacting your operating system vendor to determine whether or not SSBD is recommended. At the time of this article’s publication, multiple OS vendors have decided that SSBD will be disabled by default in their OSes as they have classified the overall risk of CVE-2018-3639 as low to moderate and the performance impact imposed will be non-trivial.

For supplemental information please see the following 3rd party OS documentation:

Redhat: Kernel Side-Channel Attack using Speculative Store Bypass - CVE-2018-3639
Microsoft: ADV180012 | Microsoft Guidance for Speculative Store Bypass

CVE-2018-3640 (Rogue System Register Read)

Microcode Mitigations

CVE-2018-3640 is resolved by a microcode update and no code changes are required for any VMware products to mitigate CVE-2018-3640. ESXi patches documented in VMware Security Advisory VMSA-2018-0012.1 may include these microcode updates. Refer to the VMware Knowledge Base articles listed in this advisory for a list of included microcodes. Alternatively, you should also be able to obtain the microcode update for your CPU as part of a firmware/BIOS update from your hardware system vendor.

Note: If newer microcode is already present on your system because of a firmware/BIOS update, ESXi will not replace it with older microcode shipped as part of an ESXi patch/update.

For more information, please see Intel’s Security Center Advisory: INTEL-SA-00115

For the latest information on how mitigations for the aforementioned issues may affect performance, see KB55210.

Related Information

https://newsroom.intel.com/articles/addressing-questions-regarding-additional-security-issues/.

Disclaimer: VMware is not responsible for the reliability of any data, opinions, advice, or statements made on third-party websites. Inclusion of such links does not imply that VMware endorses, recommends, or accepts any responsibility for the content of such sites.

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
Chinese (Simplified)JapaneseEnglish

Attachments

Additional Resources

No results for undefined

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware vSphere ESXi

VMware vSphere ESXi

Related Versions:

VMware vSphere ESXi 6.5

VMware vSphere ESXi 6.0

VMware vSphere ESXi 5.5

Take Our Survey

Support Assistant