Security Advisory

PublishTime：2022-03-18

● Marvell was made aware of vulnerabilities in the Linux mitigation for “Spectre v2” on the ThunderX2® server platformbased on research conducted by Google’s Safeside project. Marvell thanks Anthony Steinhauser of Google’s Safeside project for continued security research and appreciates the collaboration.
● The vulnerability identified by Google’s Safeside project is based on the same root cause as found in the January 2018 disclosure from Marvell (then Cavium) of “Spectre v2”(CVE-2017-5715). At that time, Marvell (Cavium) in collaboration with Arm and industry partners worked to make software (firmware and OS) mitigations available and ThunderX® customers were informed of their options. At the time the software mitigations were released,validation was incomplete since the developers did not have an attack example they could validate against. Google’s recent researchhas exposed that the software mitigation had shortcomings. Updated versions of the software mitigation patch are available and any customers that need it should reach out to Marvell.

Brand of Product：	MARVELL
Part#：
Product Category：	More
Application：	More
Data Type：	Development Environment（Software/Firmware） More
Safety & Environment Standards：	More
Operating Temperature：	Please see the document for details
Qualification Grade：	More
Qualification Approval：	More
Package：
Language：	English Chinese Chinese and English Japanese
Date of Creation：	January 2018
Version Number：
Data Encoding：
Data Size：	77 KB

Data section preview(1pages)

- The full preview is over,the data is 1 pages -

Download

+1 Like
Add to Favorites

Recommend

Selection Guide

More>

Technical Resources

More>

All reproduced articles on this site are for the purpose of conveying more information and clearly indicate the source. If media or individuals who do not want to be reproduced can contact us, which will be deleted.

Integrated Circuits