Q2 2018 Speculative Execution Side Channel Update
(INTEL-SA-00115)
Updated: Dec 5, 2018
Intel and Microsoft updated the security information of vulnerability by Side Channel Analysis as INTEL-SA-00115.
Please be advised that the information will be changed or added without notice.
Vulnerability summary
Regarding details, please refer below Intel and Microsoft site.
- Intel site
- Microsoft site
ADV180013 Microsoft Guidance for Rogue System Register Read
According to above site, there are below two vulnerabilities.
- CVE-2018-3639 - Speculative Store Bypass (SSB) - also known as Variant 4
- CVE-2018-3640 - Rogue System Register Read (RSRE) - also known as Variant 3a
Content of countermeasure
We will sequentially announce the affected models by this vulnerabilitie, and the firmware release plan to mitigate security problems.
Please check the following, Affected Models.
In light of new developments from Intel, Panasonic actively working with Intel to update the new schedule, please check back regularly for updated release dates.
In addition to the firmware update, Panasonic suggests that our customers follow the advice of both the operating system vendor, software vendor and of the chipset vendor to ensure all available protections are being utilised.
Firmware
| Target model | Detailed model numbers | Targeted release date |
|---|---|---|
| CF-19 | CF-19Z****** (mk8) |  |
| CF-19[5/6/8/9]****** (mk7) | ||
| CF-19[0/1/2/3/4]****** (mk6) | ||
| CF-19[7/A/B/X/Y]****** (mk5) | To Be Announced | |
| CF-19[R/S/T/V/W]****** (mk4) | ||
| CF-20 | CF-20[E/F/G/H]****** (mk2) | |
| CF-20[A/B/C/D]****** (mk1) | |
|
| CF-31 | CF-31[1/2/3/4]****** (mk5) | |
| CF-31[W/X/Y]****** (mk4) | |
|
| CF-31[S/U/V]****** (mk3) | ||
| CF-31[J/K/M/P/R/T]******* (mk2) | To Be Announced | |
| CF-31[A/B/D/F]****** (mk1) | ||
| CF-33 | CF-33[A/B/C/L/M/N/V/W]****** (mk1) | |
| CF-33[D/E/P/Q]****** (mk1) | |
|
| CF-52 | CF-52V****** (mk5) | |
| CF-52[S/T]****** (mk4) | To Be Announced | |
| CF-52[M/N/P/Q/R]****** (mk3) | ||
| CF-53 | CF-53[2/3/4/5/7]****** (mk4) | |
| CF-53[S/T/U/V/Y/Z/1]****** (mk3) |
|
|
| CF-53[J/K/L/M/N/P]****** (mk2) | ||
| CF-53[A/B/C/D]****** (mk1) | To Be Announced | |
| CF-54 | CF-54[G/H/J]****** (mk3) | |
| CF-54[D/E/F]****** (mk2) | |
|
| CF-54[A/B/C]****** (mk1) | |
|
| CF-AX2 | CF-AX2L****** (mk1) | |
| CF-AX3 | CF-AX3E****** (mk2) | |
| CF-C1 | CF-C1[B/L]****** (mk2) | To Be Announced |
| CF-C1[A/K]****** (mk1) | ||
| CF-C2 | CF-C2[C/D]****** (mk2/mk2.5) | |
| CF-C2A****** (mk1) | |
|
| CF-D1 | CF-D1[N/Q]****** (mk3) | |
| CF-D1[G/K]****** (mk2) | |
|
| CF-D1[A/D]****** (mk1) | To Be Announced | |
| CF-F9 | CF-F9K****** (mk2) | To Be Announced |
| CF-H2 | CF-H2[P/Q/S]****** (mk3) | |
| CF-H2[F/G/H]****** (mk2) | ||
| CF-H2[A/B]****** (mk1) | To Be Announced | |
| CF-LX3 | CF-LX3J****** (mk3) | |
| CF-LX3E****** (mk2) | ||
| CF-LX6 | CF-LX6YDAZTM, CF-LX6T***** (mk3) | |
| CF-MX4 | CF-MX4E****** (mk1) | |
| CF-S10 | CF-S10C****** (mk2) | To Be Announced |
| CF-S9 | CF-S9K****** (mk2) | To Be Announced |
| CF-SX2 | CF-SX2J****** (mk1 Asia model) | |
| CF-SX4 | CF-SX4E****** (mk1) | |
| CF-SZ6 | CF-SZ6R***** (mk2) | |
| CF-XZ6 | CF-XZ6R***** (mk1) | |
| FZ-G1 | FZ-G1[P/Q/R]****** (mk4) | |
| FZ-G1[J/K/L]****** (mk3) | |
|
| FZ-G1F****** (mk2) | |
|
| FZ-G1A****** (mk1) | |
|
| FZ-M1 | FZ-M1F******, FZ-M1ECF***R (mk2) | |
| FZ-M1C****** (mk1) | |
|
| FZ-Q1 | FZ-Q1C****** (mk1) | |
| FZ-Q2 | FZ-Q2[F/G]****** (mk1) | |
| FZ-Y1 | FZ-Y1[C/D]****** (mk2) | |
| UT-MA6000 | UT-MA6****** (mk1) | |
| UT-MB5000 | UT-MB5****** (mk1) | |
