Chromium OS‎ > ‎

Lazy FP Restore Vulnerability Status for Chrome OS

Vulnerability description

System software utilizing lazy floating point state restore in systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel. Exploitation of the vulnerability requires the ability to run native code on the device. CVE-2018-3665

Chrome OS response

Chrome OS 68, which will be released to the stable channel in late July 2018, will provide patches to the OS kernel to mitigate this vulnerability. Chrome OS devices will receive these updates automatically.

Affected devices

Chrome OS Intel devices with Core-based processors may be affected. The cpu line in the chrome:system page will show what CPU the device has.

The following list covers affected devices that will be mitigated in Chrome OS 68:


Marketing namePublic codenamePlatform
Dell Chromebook 13 3380asukaSkylake-U
Acer Chromebase 24buddyBroadwell
Samsung Chromebook ProcarolineSkylake-Y
ASUS Chromebook Flip C302caveSkylake-Y
HP Chromebook 13 G1chellSkylake-Y
Google PixelbookeveKabylake-Y
HP Chromebook 14falcoHaswell
Toshiba Chromebook 2 (2015 Edition)gandofBroadwell
ASUS Chromebox CN62guadoBroadwell
Chromebook 14 for work (CP5-471)larsSkylake-U
Toshiba ChromebookleonHaswell
Acer Chromebook 11 (C771, C771T)liliSkylake-U
Google Chromebook PixellinkIvy Bridge
Dell Chromebook 13 7310luluBroadwell
Acer ChromeboxmccloudHaswell
LG Chromebase 22CV241monroeHaswell
LG Chromebase 22CB25SmonroeHaswell
Acer Chromebook 11 (C740)paineBroadwell
ASUS Chromebox CN60pantherHaswell
Acer C720 ChromebookpeppyHaswell
Acer Chromebox CXI2rikkuBroadwell
Google Chromebook Pixel (2015)samusBroadwell
Thinkpad 13 ChromebooksentrySkylake-U
Lenovo Thinkpad X131e ChromebookstoutIvy Bridge
Lenovo ThinkCentre ChromeboxtidusBroadwell
Dell ChromeboxtrickyHaswell
Dell Chromebook 11wolfHaswell
Acer Chromebook 15 (CB5-571)yunaBroadwell
HP Chromebox CB1-(000-099)
HP Chromebox G1
HP Chromebox for Meetings
zakoHaswell
Comments