CircleCI is aware of critical vulnerabilities, termed Meltdown and Spectre , affecting modern processors in a vast range of computers, devices, and clouds, including CircleCI infrastructure. These vulnerabilities allow malicious users to read data from other programs. We are monitoring upstream vendo…

Out of interest, could code running in a Docker container theoretically read what is happening in another container, using one of these vulnerabilities? Is the answer to that question different when considering full-fat virtualisation, such as VirtualBox and VMWare?

Thanks for your question. With these vulnerabilities, one can read data from any process on the physical host whether it’s a different container and sometimes even in a different virtual machine. Google Cloud Engine and AWS have remedied the issue so customers cannot escape into other customers VMs…

OK, thanks for that. Every now and again one has to reset one’s mental model of computer security, and this is one of those times. In the past, I’ve tended to think of containers and VMs as unescapeable thanks to hardware limitations, and now we know the vulnerability is hardware-related in nature, …

Meltdown and Spectre Vulnerabilities: What We Know and Recommended Actions

Community

drazisil January 10, 2018, 1:32am 5

We are activly rolling the build fleet to patch against Meltdown: Fleet roll for patching Meltdown

Topic		Replies	Views
Fleet roll for patching Meltdown Announcements security	0	1816	January 10, 2018
Meltdown and Spectre: Recommended Actions for operators of installed CircleCI servers Community security	0	1900	January 12, 2018
CircleCI Response to CVE-2026-43499 ("GhostLock" Linux kernel vulnerability) Security cve	6	391	July 15, 2026
CircleCI response to CVE-2026-31431 ("Copy Fail" Linux kernel vulnerability) Announcements security	0	295	May 2, 2026
CircleCI Response to CVE-2026-64600 ("RefluXFS") Linux Kernel Vulnerability Security security , cve	0	70	July 29, 2026

Meltdown and Spectre Vulnerabilities: What We Know and Recommended Actions

Related topics