Skip to content
OpenAdvisories
Medium USN-3740-1 3 CVEs

linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oem, linux-raspi2 vulnerabilities

Published Aug 14, 2018 · Updated Jun 1, 2026

Ecosystem: Ubuntu

Summary

It was discovered that memory present in the L1 data cache of an Intel CPU
core may be exposed to a malicious process that is executing on the CPU
core. This vulnerability is also known as L1 Terminal Fault (L1TF). A local
attacker in a guest virtual machine could use this to expose sensitive
information (memory from other guests or the host OS). (CVE-2018-3646)

It was discovered that memory present in the L1 data cache of an Intel CPU
core may be exposed to a malicious process that is executing on the CPU
core. This vulnerability is also known as L1 Terminal Fault (L1TF). A local
attacker could use this to expose sensitive information (memory from the
kernel or other processes). (CVE-2018-3620)

Juha-Matti Tilli discovered that the IP implementation in the Linux kernel
performed algorithmically expensive operations in some situations when
handling incoming packet fragments. A remote attacker could use this to
cause a denial of service. (CVE-2018-5391)

Fixed packages 7

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux 4.15.0-32.35
Ubuntu · 18.04 LTS 18.04:LTS linux-aws 4.15.0-1019.19
Ubuntu · 18.04 LTS 18.04:LTS linux-azure 4.15.0-1021.21
Ubuntu · 18.04 LTS 18.04:LTS linux-gcp 4.15.0-1017.18
Ubuntu · 18.04 LTS 18.04:LTS linux-kvm 4.15.0-1019.19
Ubuntu · 18.04 LTS 18.04:LTS linux-oem 4.15.0-1015.18
Ubuntu · 18.04 LTS 18.04:LTS linux-raspi2 4.15.0-1020.22

Vulnerabilities 3

  • Medium 5.6
    CVE-2018-3620

    Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…

    Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine
  • Medium 5.6
    CVE-2018-3646

    Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…

    Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-5391 Public exploit EPSS 32%

    The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets

    The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-3620
  • report
    https://ubuntu.com/security/CVE-2018-3646
  • report
    https://ubuntu.com/security/CVE-2018-5391