Is Check Point affected by Intel Hyper-Threading flaw (CVE-2018-5407) ?

[Danny]

CVE-2018-5407 - Intel processor execution engine sharing on SMT (e.g. Hyper-Threading) flaw

Is Check Point affected? Should we better disable Hyper-Threading (SMT) until a fix is available?

I didn't find any notification yet on Check Point's Alert page.

[Kaspars_Zibarts]

Haha, good luck with that on productions chassis running VSX... fully tweaked to coreXL and SXL

[HeikoAnkenbrand]

Hi Danny,

As I understood it, you must execute malicious code on the same core to access the other SMT channel. So you need access to the firewall. I don't think the attack should be exploitable without another vulnerability in this case.

But let's wait for Check Point's answer.

Regards

Heiko

[Danny · Accepted solution]

Check Point Response to CVE-2018-5407 (PortSmash)

Check Point is affected but sees low relevance.