CVE-2017-5754 · cross-distro fix matrix

CVE-2017-5754: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

Affects 8 Linux releases across 14 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2017-5754 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

linux→ fixed in4.14.12-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y linux
```
nvidia-graphics-drivers→ fixed in384.111-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y nvidia-graphics-drivers
```
xen→ fixed in4.11.1~pre+1.733450b39b-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y xen
```

Source: Debian Security Tracker

linux→ fixed in4.14.12-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y linux
```
nvidia-graphics-drivers→ fixed in384.111-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y nvidia-graphics-drivers
```
xen→ fixed in4.11.1~pre+1.733450b39b-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y xen
```

Source: Debian Security Tracker

linux→ fixed in4.14.12-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y linux
```
nvidia-graphics-drivers→ fixed in384.111-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y nvidia-graphics-drivers
```
xen→ fixed in4.11.1~pre+1.733450b39b-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y xen
```