Medium RHSA-2018:2603 2 CVEs

Red Hat Security Advisory: kernel security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 15

Release	Package	Fixed in
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-debug	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-debug-debuginfo	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-debug-devel	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-debuginfo	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-debuginfo-common	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-devel	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-doc	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-headers	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-PAE	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-PAE-debuginfo	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-PAE-devel	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-xen	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-xen-debuginfo	0:2.6.18-348.41.1.el5
Red Hat · RHEL 5.9 AUS rhel_aus:5.9	kernel-xen-devel	0:2.6.18-348.41.1.el5

Vulnerabilities 2

Medium 5.6

CVE-2018-3620

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…

Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine

Aug 14, 2018
Medium 5.6

CVE-2018-3646

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…

Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine

Aug 14, 2018

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=1585005
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2603.json
report
https://access.redhat.com/security/cve/CVE-2018-3620
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3620
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3620
article
https://access.redhat.com/articles/3562741
article
https://access.redhat.com/security/vulnerabilities/L1TF
article
https://foreshadowattack.eu/
article
https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
article
https://www.redhat.com/en/blog/deeper-look-l1-terminal-fault-aka-foreshadow
article
https://www.redhat.com/en/blog/understanding-l1-terminal-fault-aka-foreshadow-what-you-need-know
report
https://access.redhat.com/security/cve/CVE-2018-3646
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3646
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3646