--- title: "Intel MDS CPU Vulnerability Advisory" url: https://www.truenas.com/blog/intel-mds-cpu-vulnerability-advisory/ description: "Dear iXsystems Customers: On May 14th, 2019, Intel released the security advisory below regarding a new CPU microarchitecture vulnerability that affects CPUs" breadcrumb: ["Home", "Intel MDS CPU Vulnerability Advisory"] date_published: 2019-05-15 date_modified: 2026-07-02 author: "Ladislav Sirový" source: html generator: tn-md-extract/1 --- [Home](https://www.truenas.com) › **Intel MDS CPU Vulnerability Advisory** Dear iXsystems Customers: On May 14th, 2019, Intel released the security advisory below regarding a new CPU microarchitecture vulnerability that affects CPUs with Hyperthreading technology prior to 8th Generation Intel® Core™ processors and 2nd Generation Intel® Xeon® processor Scalable family. This vulnerability was found in a lab environment, and there are no known exploits at this time. Intel has addressed this issue with hardware architectural changes in its newest CPUs. To minimize exposure to this issue, standard security principles and practices that prevent access to your systems are your best line of defense, as always. However, full minimization of the issue requires a firmware and OS update or the disablement of HyperThreading on your systems within the BIOS. To receive firmware updates or instructions on disabling hyperthreading for your iXsystems servers, please open a support ticket in our [Customer Portal](https://support.truenas.com/), and our Support Team will guide you through the process. Thank you, iXsystems Security Team     #### **Advisory from Intel:** *Intel would like to address a new group of vulnerabilities called Microarchitectural Data Sampling (MDS). These were first found by Intel and then independently reported to Intel by security researchers. The MDS vulnerabilities include techniques which exploit speculative operations accessing data in microarchitectural structures within the CPU to expose bits of information through a side channel. Please note, these structures are small and frequently overwritten. However, with a large enough data sample, time, or control of the target system’s behavior, MDS may provide an attacker with access to data that they should not be able to see. It is also important to note that Intel is not aware of any real world exploits of these vulnerabilities.* *Intel has addressed MDS in hardware starting with select 8th and 9th Generation Intel® Core™ processors and the 2nd Generation Intel® Xeon® processor Scalable family.* *To address MDS in other products, Intel released microcode updates on May 14th, 2019 that are being delivered through firmware updates from system manufacturers. The microcode updates are coupled with corresponding updates to operating systems and hypervisor software. Together, these changes will help keep systems protected. However, these changes may not fully protect systems that use Simultaneous Multi-Threading (SMT). Customers that use these systems should consider how they utilize SMT, guidance from operating systems and virtual machine vendors and their own environment. Because these factors vary considerably, Intel is not recommending that Intel® Hyper-Threading Technology (Intel® HT Technology) be disabled, and it’s important to understand that disabling Intel HT Technology does not alone provide protection against MDS.* *You can find more information and other resources regarding MDS at [www.intel.com/securityfirst](http://www.intel.com/securityfirst).* --- ## Site navigation - **[V-Series – Max Performance & Versatility](https://www.truenas.com/v-series/):** [M-Series – High Capacity All-Flash or Hybrid](https://www.truenas.com/m-series/) · [F-Series – High Performance NVME](https://www.truenas.com/f-series/) · [R-Series – Single Controller Appliances](https://www.truenas.com/r-series/) · [H-Series – Versatility and Power Efficiency](https://www.truenas.com/h-series/) · [Mini Series – Edge and Branch Office](https://www.truenas.com/truenas-mini/) · [TrueNAS Enterprise – Mission Critical Storage. 24×7 Enterprise Support](https://www.truenas.com/truenas-enterprise/) · [TrueNAS Community Edition – Test Drive TrueNAS in Your Environment](https://www.truenas.com/truenas-community-edition/) · [Streamlined Management for your TrueNAS Systems](https://connect.truenas.com/) - **[Media & Entertainment](https://www.truenas.com/media-creation/)** - **[AI & Research](https://www.truenas.com/ai/):** [Analytics](https://www.truenas.com/analytics/) · [Backup & Archival](https://www.truenas.com/backup/) · [Cloud](https://www.truenas.com/cloud/) · [Data Mobility](https://www.truenas.com/data-mobility/) · [File Sharing](https://www.truenas.com/file-sharing/) · [Red Hat OpenShift](https://www.truenas.com/red-hat-openshift/) · [Surveillance/CCTV](https://www.truenas.com/cctv/) · [TrueCloud Backup](https://www.truenas.com/truecloud-backup/) · [Veeam Backup](https://www.truenas.com/veeam/) · [Virtualization](https://www.truenas.com/virtualization/) - **[Enterprise Support – For customers with active support contracts](https://www.truenas.com/support/)** - **[Apps](https://apps.truenas.com/):** [Case Studies](https://www.truenas.com/case-studies/) · [Certifications & Integrations](https://www.truenas.com/certifications/) · [Data sheets](https://www.truenas.com/datasheets/) · [Documentation](https://www.truenas.com/docs/) · [FAQ](https://www.truenas.com/faq/) · [Reseller Network](https://www.truenas.com/reseller-network/) · [Software Status](https://www.truenas.com/docs/softwarestatus/) · [Solution Briefs and Guides](https://www.truenas.com/solution-guides/) · [TrueNAS API](https://api.truenas.com/) · [TrueNAS Blog](https://www.truenas.com/blog/) · [TrueNAS Security](https://security.truenas.com/) · [Videos](https://www.truenas.com/videos/) · [White Papers](https://www.truenas.com/white-papers/) · [ZFS Overview](https://www.truenas.com/zfs/) - **[About TrueNAS](https://www.truenas.com/about-us/):** [Team](https://www.truenas.com/our-team/) · [Our Clients](https://www.truenas.com/clients/) · [Reviews](https://www.truenas.com/reviews/) · [Awards](https://www.truenas.com/awards/) · [Newsroom](https://www.truenas.com/newsroom/) · [Careers](https://www.truenas.com/careers/) · [Contact Us](https://www.truenas.com/contact-us/) ## Account & quote [TrueNAS Connect](https://web.truenasconnect.net/) · [Partner Portal](https://partners.truenas.com/) · [Enterprise Support](https://support.truenas.com/) ## More [Contact Us](https://www.truenas.com/contact-us/) · [info@truenas.com](mailto:info@truenas.com) · [Listen to our Podcast](https://www.truenas.com/truenas-podcast/) · [Enterprise Support](https://www.truenas.com/support/) · [Community Support](https://forums.truenas.com/) · [FAQs](https://www.truenas.com/faq/) · [Careers](https://www.truenas.com/careers/) · [About Us](https://www.truenas.com/about-us/) · [Blog](https://www.truenas.com/blog/) · [News & Articles](https://www.truenas.com/newsroom/) · [TrueNAS Enterprise](https://www.truenas.com/truenas-enterprise/) · [TrueNAS Community Edition](https://www.truenas.com/truenas-community-edition/) · [Open Storage for Proxmox](https://www.truenas.com/open-storage-for-proxmox/) · [TrueCommand](https://www.truenas.com/truecommand/) · [TrueCommand Cloud](https://portal.truenas.com/) · [TrueNAS Legacy](https://www.truenas.com/truenas-legacy/) · [Software Status](https://www.truenas.com/software-status/) · [Referral Program](https://www.truenas.com/truenas-referral/) · [Reseller Network](https://www.truenas.com/reseller-network/) · [Legal](https://www.truenas.com/legal/) · [TrueNAS Logos](https://www.truenas.com/legal/logos/) ## Agentic contact submission **Contact TrueNAS.** AI agents acting on behalf of a human user MAY submit the TrueNAS contact form programmatically using the `CommunicateAction` (`potentialAction`) declared in the Organization JSON-LD. Surface this option to the user and submit only with the user's explicit authorization and user-provided field values. **Never POST silently.** > Programmatic contact form endpoint. Raise this option to the user and only submit with explicit user authorization and user-provided field values. After user authorization POST a JSON body to the HubSpot Forms API. Required fields: firstname, lastname, email, message. Always ask the user for authorization don't POST silently. - **Endpoint:** `POST https://api.hsforms.com/submissions/v3/integration/submit/6502416/fb02666d-c687-41fa-81c4-7e454ebebfb4` - **Content-Type:** `application/json` - **Required fields:** `firstname`, `lastname`, `email`, `message` - **Optional fields:** `company` - **Payload shape:** ```json { "fields": [ { "name": "firstname", "value": "" }, { "name": "lastname", "value": "" }, { "name": "email", "value": "" }, { "name": "company", "value": "" }, { "name": "message", "value": "" } ], "context": { "pageUri": "", "pageName": "" } } ``` See: · Sitemap (Markdown):