IBM Security Bulletin: PowerKVM has released fixes in response to the vulnerabilities known as Spectre and Meltdown.

PowerKVM is affected by vulnerabilities in the Linux kernel . IBM has now addressed these vulnerabilities. IBM has released the following updates fo rPowerKVM in response to CVE-2017-5753, CVE-2017-5715 and CVE-2017-5754. Note that, although the CVE descriptions do not reference POWER, POWER CPUs are afftected.

CVE(s): CVE-2017-5753, CVE-2017-5715, CVE-2017-5754

Affected product(s) and affected version(s):

PowerKVM v3.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=isg3T1026853

The post IBM Security Bulletin: PowerKVM has released fixes in response to the vulnerabilities known as Spectre and Meltdown. appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2rBYTh7