Description
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Intel | Multiple | Multiple | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | intel-microcode | 3.20180703.1 | — |
| Debian 13 | intel-microcode | 3.20180703.1 | — |
| Debian 12 | intel-microcode | 3.20180703.1 | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | spectre-meltdown-checker | 26.36.0602723-1.1 | openSUSE-SU-2026:11242-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | perf +7 | 4.14.62-70.117.amzn2 | ALAS2-2018-1058 |
Advisories 2
- openSUSE-SU-2026:11242-1 spectre-meltdown-checker-26.36.0602723-1.1 on GA media SUSE / openSUSE Security Updates · Jul 10, 2026
- ALAS2-2018-1058 Critical: kernel security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Aug 14, 2018
References
- VU#982149 third-party-advisory
- 1041451 vdb-entry
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008
- 105080 vdb-entry
- https://foreshadowattack.eu/
- https://security.netapp.com/advisory/ntap-20180815-0001/
- 20180814 CPU Side-Channel Information Disclosure Vulnerabilities: August 2018 vendor-advisory
- https://support.f5.com/csp/article/K35558453
- http://support.lenovo.com/us/en/solutions/LEN-24163
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html
- https://www.synology.com/support/security/Synology_SA_18_45
- [debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update mailing-list
- https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_us
- https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf