Skip to content
OpenAdvisories

Description

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

Affected products

VendorProductAffectedFixed
Intel Multiple Multiple —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 arm-trusted-firmware 2.12.16+dfsg-1 —
Debian 14 intel-microcode 3.20180703.1 —
Debian 14 linux 4.16.12-1 —
Debian 14 xen 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u7 —
Debian 13 arm-trusted-firmware No fix yet —
Debian 13 intel-microcode 3.20180703.1 —
Debian 13 linux 4.16.12-1 —
Debian 13 xen 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u7 —
Debian 12 arm-trusted-firmware No fix yet —
Debian 12 intel-microcode 3.20180703.1 —
Debian 12 linux 4.16.12-1 —
Debian 12 xen 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u7 —
Debian 9 intel-microcode 3.20180703.2~deb9u1 DSA-4273-2, DSA-4273-1
Debian 9 xen 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u7 DSA-4210-1
Debian 8 intel-microcode 3.20180703.2~deb8u1 DLA-1446-1
Debian 8 linux 3.16.59-1 DLA-1731-1, DLA-1529-1
Debian 8 linux-4.9 4.9.110-1~deb8u1 DLA-1715-1, DLA-1423-1
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS linux-vmware No fix yet —
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-realtime +1 No fix yet —
Ubuntu 18.04 LTS intel-microcode 3.20180807a.0ubuntu0.18.04.1 USN-3756-1
Ubuntu 18.04 LTS libvirt 4.0.0-1ubuntu8.2 USN-3680-1
Ubuntu 18.04 LTS linux 4.15.0-22.24 USN-3652-1
Ubuntu 18.04 LTS linux-aws 4.15.0-1009.9 USN-3652-1
Ubuntu 18.04 LTS linux-azure 4.15.0-1012.12 USN-3777-3, USN-3652-1
Ubuntu 18.04 LTS linux-gcp 4.15.0-1008.8 USN-3652-1
Ubuntu 18.04 LTS linux-kvm 4.15.0-1010.10 USN-3652-1
Ubuntu 18.04 LTS linux-oem 4.15.0-1006.9 USN-3652-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1012.13 —
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1053.57 —
Ubuntu 18.04 LTS qemu 1:2.11+dfsg-1ubuntu7.2 USN-3679-1, USN-3651-1
Ubuntu 16.04 LTS intel-microcode 3.20180807a.0ubuntu0.16.04.1 USN-3756-1
Ubuntu 16.04 LTS libvirt 1.3.1-1ubuntu10.24 USN-3680-1
Ubuntu 16.04 LTS linux 4.4.0-127.153 USN-3654-1
Ubuntu 16.04 LTS linux-aws 4.4.0-1060.69 USN-3654-1
Ubuntu 16.04 LTS linux-azure 4.13.0-1018.21 USN-3777-3, USN-3653-2
Ubuntu 16.04 LTS linux-gcp 4.13.0-1017.21 USN-3653-2
Ubuntu 16.04 LTS linux-hwe 4.13.0-43.48~16.04.1 USN-3653-2
Ubuntu 16.04 LTS linux-kvm 4.4.0-1026.31 USN-3654-1
Ubuntu 16.04 LTS linux-oem 4.13.0-1028.31 USN-3653-2
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1091.99 —
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1094.99 —
Ubuntu 16.04 LTS qemu 1:2.5+dfsg-5ubuntu10.29 USN-3679-1, USN-3651-1
Ubuntu 16.04 LTS xen No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS intel-microcode 3.20180807a.0ubuntu0.14.04.1 USN-3756-1
Ubuntu 14.04 LTS libvirt 1.2.2-0ubuntu13.1.27 USN-3680-1
Ubuntu 14.04 LTS linux 3.13.0-149.199 USN-3655-1
Ubuntu 14.04 LTS linux-aws 4.4.0-1022.22 USN-3654-2
Ubuntu 14.04 LTS linux-lts-xenial 4.4.0-127.153~14.04.1 USN-3654-2
Ubuntu 14.04 LTS qemu 2.0.0+dfsg-2ubuntu1.42 USN-3679-1, USN-3651-1
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1008.10 —
Ubuntu Pro 20.04 LTS linux-azure-fde-5.15 5.15.0-1114.123~20.04.1 —
ReleasePackageFixed inAdvisory
RHEL 7 java-1.7.0-openjdk +6 1:1.7.0.181-2.6.14.8.el7_5 RHSA-2018:1648
RHEL 7 java-1.8.0-openjdk +15 1:1.8.0.171-8.b10.el7_5 RHSA-2018:1649
RHEL 7 kernel-alt +1 4.14.0-49.8.1.el7a RHSA-2018:2948, RHSA-2018:1967
RHEL 7 kernel-rt +10 3.10.0-862.3.2.rt56.808.el7 RHSA-2018:2003, RHSA-2018:1630
RHEL 7 libvirt +29 3.9.0-14.el7_5.5 RHSA-2018:1997, RHSA-2018:1632
RHEL 7 perf +18 3.10.0-862.3.2.el7 RHSA-2018:2948, RHSA-2018:1967, RHSA-2018:1965
RHEL 7 qemu-img +3 10:1.5.3-156.el7_5.2 RHSA-2018:2001, RHSA-2018:1633
RHEL 7 qemu-img-rhev +3 10:2.6.0-28.el7_3.17 RHSA-2018:2060, RHSA-2018:1655, RHSA-2018:1654
RHEL 7 redhat-virtualization-host +1 3.6-20180521.0.el7_3 RHSA-2018:1710, RHSA-2018:1696
RHEL 7 rhev-hypervisor7 7.3-20180521.1.el7ev RHSA-2018:2246, RHSA-2018:1711
RHEL 7 vdsm +13 4.17.45-1.el7ev RHSA-2018:1690, RHSA-2018:1675
RHEL 7 vdsm-api +10 4.20.27.2-1.el7ev RHSA-2018:1675
RHEL 6 java-1.7.0-openjdk +4 1:1.7.0.181-2.6.14.8.el6_9 RHSA-2018:1647
RHEL 6 java-1.8.0-openjdk +11 1:1.8.0.171-8.b10.el6_9 RHSA-2018:1650
RHEL 6 libvirt +4 0.10.2-62.el6_9.2 RHSA-2018:1669
RHEL 6 perf +16 2.6.32-696.30.1.el6 RHSA-2018:2164, RHSA-2018:1854, RHSA-2018:1651
RHEL 6 qemu-img +3 2:0.12.1.2-2.503.el6_9.6 RHSA-2018:2162, RHSA-2018:1660
RHEL 6 rhev-hypervisor7 7.3-20180521.1.el6ev RHSA-2018:2246, RHSA-2018:1711
Show 22 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhev Manager 4 rhvm +19 4.2.3.6-0.1.el7 RHSA-2018:1676
Red Hat Rhev Manager 4 rhvm-setup-plugins 4.2.9-1.el7ev RHSA-2019:1046, RHSA-2018:2328, RHSA-2018:1674
Red Hat Rhev Manager 3 rhevm +18 3.6.13.2-0.1.el6 RHSA-2018:1688
Red Hat Rhev Manager 3 rhevm-setup-plugins 3.6.7-1.el6ev RHSA-2018:1689
RHEL 7.4 EUS libvirt +29 3.2.0-14.el7_4.10 RHSA-2018:2006, RHSA-2018:1652
RHEL 7.4 EUS perf +18 3.10.0-693.25.7.el7 RHSA-2018:2387, RHSA-2018:1738, RHSA-2018:1635
RHEL 7.4 EUS qemu-img +3 10:1.5.3-141.el7_4.7 RHSA-2018:1663
RHEL 7.3 EUS libvirt +19 2.0.0-10.el7_3.12 RHSA-2018:3398, RHSA-2018:1653
RHEL 7.3 EUS perf +18 3.10.0-514.48.5.el7 RHSA-2018:2161, RHSA-2018:1737, RHSA-2018:1636
RHEL 7.3 EUS qemu-img +3 10:1.5.3-126.el7_3.14 RHSA-2018:1662
RHEL 7.2 TUS libvirt +18 1.2.17-13.el7_2.8 RHSA-2018:3407, RHSA-2018:1668
RHEL 7.2 TUS perf +12 3.10.0-327.66.5.el7 RHSA-2018:2216, RHSA-2018:1637
RHEL 7.2 TUS qemu-img +6 10:1.5.3-105.el7_2.17 RHSA-2018:3423, RHSA-2018:1661
RHEL 7.2 E4S libvirt +18 1.2.17-13.el7_2.8 RHSA-2018:3407, RHSA-2018:1668
RHEL 7.2 E4S perf +12 3.10.0-327.66.5.el7 RHSA-2018:2216, RHSA-2018:1637
RHEL 7.2 E4S qemu-img +6 10:1.5.3-105.el7_2.17 RHSA-2018:3423, RHSA-2018:1661
RHEL 7.2 AUS libvirt +18 1.2.17-13.el7_2.8 RHSA-2018:3407, RHSA-2018:1668
RHEL 7.2 AUS perf +12 3.10.0-327.66.5.el7 RHSA-2018:2216, RHSA-2018:1637
RHEL 7.2 AUS qemu-img +6 10:1.5.3-105.el7_2.17 RHSA-2018:3423, RHSA-2018:1661
RHEL 6.7 EUS libvirt +4 0.10.2-54.el6_7.8 RHSA-2018:3402, RHSA-2018:1667
RHEL 6.7 EUS perf +16 2.6.32-573.55.4.el6 RHSA-2018:2250, RHSA-2018:1826, RHSA-2018:1638
RHEL 6.7 EUS qemu-img +3 2:0.12.1.2-2.479.el6_7.7 RHSA-2018:3424, RHSA-2018:1659
RHEL 6.6 TUS libvirt +4 0.10.2-46.el6_6.8 RHSA-2018:3400, RHSA-2018:1666
RHEL 6.6 TUS perf +10 2.6.32-504.69.3.el6 RHSA-2018:2309, RHSA-2018:1639
RHEL 6.6 TUS qemu-img +3 2:0.12.1.2-2.448.el6_6.6 RHSA-2018:3425, RHSA-2018:1658
RHEL 6.6 AUS libvirt +4 0.10.2-46.el6_6.8 RHSA-2018:3400, RHSA-2018:1666
RHEL 6.6 AUS perf +10 2.6.32-504.69.3.el6 RHSA-2018:2309, RHSA-2018:1639
RHEL 6.6 AUS qemu-img +3 2:0.12.1.2-2.448.el6_6.6 RHSA-2018:3425, RHSA-2018:1658
RHEL 6.5 AUS libvirt +4 0.10.2-29.el6_5.16 RHSA-2018:3396, RHSA-2018:1665
RHEL 6.5 AUS perf +10 2.6.32-431.89.4.el6 RHSA-2018:1640
RHEL 6.5 AUS qemu-img +3 2:0.12.1.2-2.415.el6_5.18 RHSA-2018:3397, RHSA-2018:1657
RHEL 6.4 AUS libvirt +4 0.10.2-18.el6_4.17 RHSA-2018:3399, RHSA-2018:1664
RHEL 6.4 AUS perf +9 2.6.32-358.88.4.el6 RHSA-2018:2394, RHSA-2018:1641
RHEL 6.4 AUS qemu-img +4 2:0.12.1.2-2.355.el6_4.11 RHSA-2018:3401, RHSA-2018:1656
RHEL 5.9 AUS kernel +10 2.6.18-348.40.1.el5 RHSA-2018:2171
RHEL 5 ELS kernel +12 2.6.18-433.el5 RHSA-2018:2172
Red Hat Openstack Els 7 qemu-img-rhev +3 10:2.9.0-16.el7_4.18 RHSA-2019:0148
Red Hat OpenStack 13 qemu-img-rhev +3 10:2.10.0-21.el7_5.4 RHSA-2018:2228
Red Hat OpenStack 12 qemu-img-rhev +3 10:2.10.0-21.el7_5.3 RHSA-2018:2258, RHSA-2018:1643
Red Hat OpenStack 10 qemu-img-rhev +3 10:2.10.0-21.el7_5.3 RHSA-2018:2289, RHSA-2018:1644
Red Hat OpenStack 9 qemu-img-rhev +3 10:2.10.0-21.el7_5.3 RHSA-2018:2363, RHSA-2018:1645
Red Hat OpenStack 8 qemu-img-rhev +3 10:2.10.0-21.el7_5.3 RHSA-2018:2364, RHSA-2018:1646
Red Hat OpenStack 7 qemu-img-rhev +3 10:2.9.0-16.el7_4.17 RHSA-2018:1686
Red Hat MRG 2 kernel-rt +10 1:3.10.0-693.25.7.rt56.615.el6rt RHSA-2018:2396, RHSA-2018:1642
ReleasePackageFixed inAdvisory
SLES 15 SP1 java-1_8_0-openjdk 1.8.0.212-3.19.1 SUSE-SU-2019:1211-2
SLES 15 java-1_8_0-openjdk 1.8.0.212-3.19.1 SUSE-SU-2019:1211-1
SLES 15 kernel-docs +6 4.12.14-25.3.1 SUSE-SU-2021:3969-1, SUSE-SU-2018:2092-1
SLES 15 qemu 2.11.2-9.4.1 SUSE-SU-2018:2340-1
SLES 15 ucode-intel 20180703-3.3.1 SUSE-SU-2018:2338-1, SUSE-SU-2018:1926-1
SLES 12 SP5 java-1_7_0-openjdk 1.7.0.311-43.50.2 SUSE-SU-2021:3007-1
SLES 12 SP5 kernel-azure +2 4.12.14-16.25.1 SUSE-SU-2023:3349-1, SUSE-SU-2020:2540-1
SLES 12 SP4 java-1_7_0-openjdk 1.7.0.201-43.18.1 SUSE-SU-2019:2028-1, SUSE-SU-2019:0049-1
SLES 12 SP4 java-1_8_0-openjdk 1.8.0.212-27.32.1 SUSE-SU-2019:1219-1
SLES 12 SP3 java-1_7_0-openjdk 1.7.0.201-43.18.1 SUSE-SU-2019:0049-1
SLES 12 SP3 java-1_8_0-openjdk 1.8.0.181-27.26.2 SUSE-SU-2019:1219-1, SUSE-SU-2018:3064-1
SLES 12 SP3 kernel-azure +2 4.4.170-4.22.1 SUSE-SU-2019:0148-1
SLES 12 SP3 kernel-docs +4 4.4.131-94.29.1 SUSE-SU-2018:1366-1
SLES 12 SP3 libvirt 3.3.0-5.22.1 SUSE-SU-2018:2304-1
SLES 12 SP3 qemu 2.9.1-6.16.1 SUSE-SU-2018:3555-1, SUSE-SU-2018:1378-1
SLES 12 SP3 ucode-intel 20180703-13.25.1 SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1
SLES 12 SP3 xen 4.9.2_06-3.32.1 SUSE-SU-2018:1456-1
Show 21 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP2 java-1_7_0-openjdk 1.7.0.201-43.18.1 SUSE-SU-2019:0049-1
SLES 12 SP2 java-1_8_0-openjdk 1.8.0.181-27.26.2 SUSE-SU-2019:1219-1, SUSE-SU-2018:3064-2, SUSE-SU-2018:3064-1
SLES 12 SP2 kernel-syms +2 4.4.121-92.80.1 SUSE-SU-2023:3324-1, SUSE-SU-2018:1377-2, SUSE-SU-2018:1377-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_22 1-3.5.2 SUSE-SU-2018:1377-2, SUSE-SU-2018:1377-1
SLES 12 SP2 libvirt 2.0.0-27.42.1 SUSE-SU-2018:1614-2, SUSE-SU-2018:1614-1
SLES 12 SP2 qemu 2.6.2-41.40.1 SUSE-SU-2018:2973-2, SUSE-SU-2018:2973-1, SUSE-SU-2018:1362-2
SLES 12 SP2 ucode-intel 20180703-13.25.1 SUSE-SU-2018:2331-2, SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-2
SLES 12 SP2 xen 4.7.5_04-43.33.1 SUSE-SU-2018:1699-2, SUSE-SU-2018:1699-1
SLES 12 SP1 java-1_7_0-openjdk 1.7.0.201-43.18.1 SUSE-SU-2019:0049-1
SLES 12 SP1 java-1_8_0-openjdk 1.8.0.181-27.26.2 SUSE-SU-2019:1219-1, SUSE-SU-2018:3064-1
SLES 12 SP1 kernel-xen +3 3.12.74-60.64.93.1 SUSE-SU-2018:1375-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_28 1-2.5.1 SUSE-SU-2018:1375-1
SLES 12 SP1 libvirt 1.2.18.4-22.3.1 SUSE-SU-2018:2082-1
SLES 12 SP1 qemu 2.3.1-33.9.4 SUSE-SU-2018:2565-1, SUSE-SU-2018:1363-1
SLES 12 SP1 ucode-intel 20180703-13.25.1 SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1
SLES 12 SP1 xen 4.5.5_24-22.49.1 SUSE-SU-2018:1582-1
SLES 12 java-1_7_0-openjdk 1.7.0.201-43.18.1 SUSE-SU-2019:0049-1
SLES 12 kernel-ec2 +4 3.12.61-52.133.1 SUSE-SU-2018:1375-1, SUSE-SU-2018:1374-1
SLES 12 kgraft-patch-SLE12_Update_35 1-1.5.1 SUSE-SU-2018:1374-1
SLES 12 libvirt 1.2.5-27.13.1 SUSE-SU-2018:2141-1
SLES 12 qemu 2.0.2-48.40.2 SUSE-SU-2018:2556-1, SUSE-SU-2018:1386-1
SLES 12 ucode-intel 20180703-13.25.1 SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1
SLES 12 xen 4.4.4_32-22.68.1 SUSE-SU-2018:1658-1
SLES 11 SP4 kernel-ec2 +9 3.0.101-108.48.1 SUSE-SU-2023:3333-1, SUSE-SU-2018:1368-1
SLES 11 SP4 kvm 1.4.2-60.12.1 SUSE-SU-2018:2650-1, SUSE-SU-2018:1479-1
SLES 11 SP4 libvirt 1.2.5-23.15.1 SUSE-SU-2018:1475-1
SLES 11 SP4 microcode_ctl 1.17-102.83.24.1 SUSE-SU-2018:2335-1, SUSE-SU-2018:2076-1
SLES 11 SP4 xen 4.4.4_32-61.29.2 SUSE-SU-2018:1603-1
SLES 11 SP3 kernel-ec2 +7 3.0.101-0.47.106.29.1 SUSE-SU-2018:1376-1
SLES 11 SP3 kvm 1.4.2-53.20.1 SUSE-SU-2018:2615-1, SUSE-SU-2018:1389-1
SLES 11 SP3 libvirt 1.0.5.9-21.9.1 SUSE-SU-2018:1452-1
SLES 11 SP3 microcode_ctl 1.17-102.83.24.1 SUSE-SU-2018:2335-1, SUSE-SU-2018:2076-1
SLES 11 SP3 xen 4.2.5_21-45.25.1 SUSE-SU-2018:2528-1
SLES for SAP 15 kernel-docs +1 4.12.14-150.78.2 SUSE-SU-2021:3969-1
SLES for SAP 15 kernel-syms +3 4.12.14-150.78.1 SUSE-SU-2021:3969-1
SLES for SAP 12 SP5 java-1_7_0-openjdk 1.7.0.311-43.50.2 SUSE-SU-2021:3007-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.25.1 SUSE-SU-2023:3349-1, SUSE-SU-2020:2540-1
SLES for SAP 12 SP4 java-1_7_0-openjdk 1.7.0.201-43.18.1 SUSE-SU-2019:2028-1, SUSE-SU-2019:0049-1
SLES for SAP 12 SP4 java-1_8_0-openjdk 1.8.0.212-27.32.1 SUSE-SU-2019:1219-1
SLES for SAP 12 SP3 java-1_7_0-openjdk 1.7.0.201-43.18.1 SUSE-SU-2019:0049-1
SLES for SAP 12 SP3 java-1_8_0-openjdk 1.8.0.181-27.26.2 SUSE-SU-2019:1219-1, SUSE-SU-2018:3064-1
SLES for SAP 12 SP3 kernel-azure +2 4.4.170-4.22.1 SUSE-SU-2019:0148-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.131-94.29.1 SUSE-SU-2018:1366-1
SLES for SAP 12 SP3 libvirt 3.3.0-5.22.1 SUSE-SU-2018:2304-1
SLES for SAP 12 SP3 qemu 2.9.1-6.16.1 SUSE-SU-2018:3555-1, SUSE-SU-2018:1378-1
SLES for SAP 12 SP3 ucode-intel 20180703-13.25.1 SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1
SLES for SAP 12 SP3 xen 4.9.2_06-3.32.1 SUSE-SU-2018:1456-1
SLES for SAP 12 SP2 java-1_7_0-openjdk 1.7.0.201-43.18.1 SUSE-SU-2019:0049-1
SLES for SAP 12 SP2 java-1_8_0-openjdk 1.8.0.181-27.26.2 SUSE-SU-2019:1219-1, SUSE-SU-2018:3064-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.80.1 SUSE-SU-2018:1377-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_22 1-3.5.2 SUSE-SU-2018:1377-1
SLES for SAP 12 SP2 libvirt 2.0.0-27.42.1 SUSE-SU-2018:1614-1
SLES for SAP 12 SP2 qemu 2.6.2-41.40.1 SUSE-SU-2018:2973-1, SUSE-SU-2018:1362-1
SLES for SAP 12 SP2 ucode-intel 20180703-13.25.1 SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1
SLES for SAP 12 SP2 xen 4.7.5_04-43.33.1 SUSE-SU-2018:1699-1
SLES for SAP 12 SP1 java-1_7_0-openjdk 1.7.0.201-43.18.1 SUSE-SU-2019:0049-2
SLES for SAP 12 SP1 java-1_8_0-openjdk 1.8.0.181-27.26.2 SUSE-SU-2019:1219-1, SUSE-SU-2018:3064-3
SLES for SAP 12 SP1 kernel-xen +3 3.12.74-60.64.93.1 SUSE-SU-2018:1375-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_28 1-2.5.1 SUSE-SU-2018:1375-1
SLES for SAP 12 SP1 libvirt 1.2.18.4-22.3.1 SUSE-SU-2018:2082-1
SLES for SAP 12 SP1 qemu 2.3.1-33.9.4 SUSE-SU-2018:2565-1, SUSE-SU-2018:1363-1
SLES for SAP 12 SP1 ucode-intel 20180703-13.25.1 SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1
SLES for SAP 12 SP1 xen 4.5.5_24-22.49.1 SUSE-SU-2018:1582-1
SLES for SAP 11 SP4 kernel-ec2 +8 3.0.101-108.48.1 SUSE-SU-2018:1368-1
SLES for SAP 11 SP4 kvm 1.4.2-60.12.1 SUSE-SU-2018:2650-1, SUSE-SU-2018:1479-1
SLES for SAP 11 SP4 libvirt 1.2.5-23.15.1 SUSE-SU-2018:1475-1
SLES for SAP 11 SP4 microcode_ctl 1.17-102.83.24.1 SUSE-SU-2018:2335-1, SUSE-SU-2018:2076-1
SLES for SAP 11 SP4 xen 4.4.4_32-61.29.2 SUSE-SU-2018:1603-1
SLE Real Time 12 SP5 kernel-rt +3 4.12.14-10.16.1 SUSE-SU-2020:2605-1
SLE Real Time 12 SP3 kernel-rt +3 4.4.138-3.14.1 SUSE-SU-2018:1816-1
SLE Real Time 11 SP4 kernel-rt +3 3.0.101.rt130-69.27.1 SUSE-SU-2018:1846-1
SLE Live Patching 15 kernel-default 4.12.14-25.3.1 SUSE-SU-2021:3969-1, SUSE-SU-2018:2092-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_1 +1 1-1.3.1 SUSE-SU-2021:3969-1, SUSE-SU-2018:2092-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_12 1-4.5.2 SUSE-SU-2018:1366-1
SLE HPC 15 kernel-docs +1 4.12.14-150.78.2 SUSE-SU-2021:3969-1
SLE HPC 15 kernel-syms +3 4.12.14-150.78.1 SUSE-SU-2021:3969-1
SUSE OpenStack Cloud 7 java-1_7_0-openjdk 1.7.0.201-43.18.1 SUSE-SU-2019:0049-1
SUSE OpenStack Cloud 7 java-1_8_0-openjdk 1.8.0.181-27.26.2 SUSE-SU-2019:1219-1, SUSE-SU-2018:3064-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.80.1 SUSE-SU-2018:1377-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_22 1-3.5.2 SUSE-SU-2018:1377-1
SUSE OpenStack Cloud 7 libvirt 2.0.0-27.42.1 SUSE-SU-2018:1614-1
SUSE OpenStack Cloud 7 qemu 2.6.2-41.40.1 SUSE-SU-2018:2973-1, SUSE-SU-2018:1362-1
SUSE OpenStack Cloud 7 ucode-intel 20180703-13.25.1 SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1
SUSE OpenStack Cloud 7 xen 4.7.5_04-43.33.1 SUSE-SU-2018:1699-1
SUSE Linux Enterprise Point of Sale 11 SP3 kernel-ec2 +6 3.0.101-0.47.106.29.1 SUSE-SU-2018:1376-1
SUSE Linux Enterprise Point of Sale 11 SP3 kvm 1.4.2-53.20.1 SUSE-SU-2018:2615-1, SUSE-SU-2018:1389-1
SUSE Linux Enterprise Point of Sale 11 SP3 libvirt 1.0.5.9-21.9.1 SUSE-SU-2018:1452-1
SUSE Linux Enterprise Point of Sale 11 SP3 microcode_ctl 1.17-102.83.24.1 SUSE-SU-2018:2335-1, SUSE-SU-2018:2076-1
SUSE Linux Enterprise Point of Sale 11 SP3 xen 4.2.5_21-45.25.1 SUSE-SU-2018:2528-1
SUSE Enterprise Storage 4 java-1_7_0-openjdk 1.7.0.201-43.18.1 SUSE-SU-2019:0049-1
SUSE Enterprise Storage 4 java-1_8_0-openjdk 1.8.0.181-27.26.2 SUSE-SU-2019:1219-1, SUSE-SU-2018:3064-1
SUSE Enterprise Storage 4 kernel-syms +2 4.4.121-92.80.1 SUSE-SU-2018:1377-1
SUSE Enterprise Storage 4 kgraft-patch-SLE12-SP2_Update_22 1-3.5.2 SUSE-SU-2018:1377-1
SUSE Enterprise Storage 4 libvirt 2.0.0-27.42.1 SUSE-SU-2018:1614-1
SUSE Enterprise Storage 4 qemu 2.6.2-41.40.1 SUSE-SU-2018:2973-1, SUSE-SU-2018:1362-1
SUSE Enterprise Storage 4 ucode-intel 20180703-13.25.1 SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1
SUSE Enterprise Storage 4 xen 4.7.5_04-43.33.1 SUSE-SU-2018:1699-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed java-1_8_0-openjdk 1.8.0.302-2.2 openSUSE-SU-2024:10876-1
openSUSE Tumbleweed libvirt 7.7.0-2.1 openSUSE-SU-2024:11008-1
openSUSE Tumbleweed qemu 6.1.0-32.1 openSUSE-SU-2024:11287-1
openSUSE Tumbleweed xen 4.15.1_01-1.2 openSUSE-SU-2024:11520-1
openSUSE Leap 15.1 kernel-docs +8 4.12.14-lp151.28.63.1 openSUSE-SU-2020:1325-1
openSUSE Leap 15.0 java-1_8_0-openjdk 1.8.0.212-lp150.2.16.1 openSUSE-SU-2019:1438-1
ReleasePackageFixed inAdvisory
Alpine v3.24 openjdk8 8.181.13-r0 —
Alpine v3.24 xen 4.11.0-r0 —
Alpine v3.23 openjdk8 8.181.13-r0 —
Alpine v3.23 xen 4.11.0-r0 —
Alpine v3.22 openjdk8 8.181.13-r0 —
Alpine v3.22 xen 4.11.0-r0 —
Alpine v3.21 openjdk8 8.181.13-r0 —
Alpine v3.21 xen 4.11.0-r0 —
Alpine v3.20 openjdk8 8.181.13-r0 —
Alpine v3.20 xen 4.11.0-r0 —
Show 15 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 openjdk8 8.181.13-r0 —
Alpine v3.19 xen 4.11.0-r0 —
Alpine v3.18 openjdk8 8.181.13-r0 —
Alpine v3.18 xen 4.11.0-r0 —
Alpine v3.17 openjdk8 8.181.13-r0 —
Alpine v3.17 xen 4.11.0-r0 —
Alpine v3.16 openjdk8 8.181.13-r0 —
Alpine v3.16 xen 4.11.0-r0 —
Alpine v3.15 openjdk8 8.181.13-r0 —
Alpine v3.15 xen 4.11.0-r0 —
Alpine v3.14 openjdk8 8.181.13-r0 —
Alpine v3.14 xen 4.11.0-r0 —
Alpine v3.13 openjdk8 8.181.13-r0 —
Alpine v3.13 xen 4.11.0-r0 —
Alpine v3.12 openjdk8 8.181.13-r0 —
Alpine v3.12 xen 4.11.0-r0 —
Alpine v3.11 openjdk8 8.181.13-r0 —
Alpine v3.11 xen 4.11.0-r0 —
Alpine v3.10 openjdk8 8.181.13-r0 —
Alpine v3.10 xen 4.11.0-r0 —
Alpine v3.9 openjdk8 8.181.13-r0 —
Alpine v3.9 xen 4.11.0-r0 —
Alpine v3.8 openjdk8 8.181.13-r0 —
Alpine v3.8 xen 4.10.1-r3 —
Alpine v3.7 openjdk8 8.181.13-r0 —
Alpine v3.7 xen 4.9.2-r3 —
Alpine v3.6 openjdk8 8.181.13-r0 —
Alpine v3.6 xen 4.8.4-r0 —
Alpine v3.5 openjdk8 8.181.13-r0 —
Alpine v3.5 xen 4.7.6-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 java-1.7.0-openjdk +6 1:1.7.0.181-2.6.14.8.amzn2 ALAS2-2018-1037
Amazon Linux 2 java-1.8.0-openjdk +15 1:1.8.0.171-8.b10.amzn2 ALAS2-2018-1039
Amazon Linux 2 libvirt +29 3.9.0-14.amzn2.5 ALAS2-2018-1033
Amazon Linux 2 perf +7 4.14.47-63.37.amzn2 ALAS2-2018-1038
Amazon Linux 2 qemu-img +3 10:1.5.3-156.amzn2.2.3 ALAS2-2018-1034

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 ivshmem-tools +2 15:3.0.0-1.el7 ELSA-2019-4585, ELSA-2018-4285
Oracle Linux 7 java-1.7.0-openjdk +6 1:1.7.0.181-2.6.14.8.0.1.el7_5 ELSA-2018-1648
Oracle Linux 7 java-1.8.0-openjdk +15 1:1.8.0.171-8.b10.el7_5 ELSA-2018-1649
Oracle Linux 7 kernel-uek +5 4.1.12-124.15.2.el7uek ELSA-2019-4531, ELSA-2018-4126, ELSA-2018-4114
Oracle Linux 7 libvirt +29 3.9.0-14.el7_5.5 ELSA-2018-1997, ELSA-2018-1632
Oracle Linux 7 perf +11 3.10.0-862.3.2.el7 ELSA-2018-1965, ELSA-2018-1629
Oracle Linux 7 qemu +7 12:2.9.0-11.1.el7 ELSA-2019-4585, ELSA-2018-4289, ELSA-2018-4285
Oracle Linux 7 qemu-img +3 10:1.5.3-156.el7_5.2 ELSA-2019-4585, ELSA-2018-4289, ELSA-2018-4285

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Exploit-DB 1

GitHub 4 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 50

References