Graviton AL73400 Spectre/Meltdown

The CPU you mention is from the Cortex-A72 family, which performs branch prediction to improve the flow in the instruction pipeline, so theoretically it is vulnerable )

Is it affected?

Yes/No. 😯

A "Graviton", more properly an "AWS Graviton" is an Alpine AL73400
https://en.wikichip.org/wiki/annapurna_labs/alpine/al73400
i.e. a set of 16 ARM cortex-a72, which is affected by 4 of 5 variants

https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability

Variant 1 bounds check bypass store (CVE-2017-5753) and bounds check bypass store (CVE-2018-3693)
Variant 2 branch target injection (CVE-2017-5715)
Variant 3 using speculative reads of inaccessible data (CVE-2017-5754)
Subvariant 3a using speculative reads of inaccessible data (CVE-2018-3640)
Variant 4 speculative bypassing of stores by younger loads despite the presence of a dependency (CVE-2018-3639)

But I would expect that Amazon will have introduced some patches and mitigations to their EC2 A1 before offering them a few weeks ago.

jaclaz

Danke, 1 of 5 is risky. We just thought it would be a chance to flee the S/M disaster. Ice Lake only will solve the crisis, late 2021