Description
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Intel | Multiple | Multiple | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | intel-microcode | 3.20180703.1 | — |
| Debian 13 | intel-microcode | 3.20180703.1 | — |
| Debian 12 | intel-microcode | 3.20180703.1 | — |
| Debian 9 | intel-microcode | 3.20180703.2~deb9u1 | DSA-4273-2, DSA-4273-1 |
| Debian 8 | intel-microcode | 3.20180703.2~deb8u1 | DLA-1446-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | intel-microcode | 3.20180807a.0ubuntu0.18.04.1 | USN-3756-1 |
| Ubuntu 16.04 LTS | intel-microcode | 3.20180807a.0ubuntu0.16.04.1 | USN-3756-1 |
| Ubuntu 14.04 LTS | intel-microcode | 3.20180807a.0ubuntu0.14.04.1 | USN-3756-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 | ucode-intel | 20180703-3.3.1 | SUSE-SU-2018:2338-1, SUSE-SU-2018:1926-1 |
| SLES 12 SP3 | ucode-intel | 20180703-13.25.1 | SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1 |
| SLES 12 SP2 | ucode-intel | 20180703-13.25.1 | SUSE-SU-2018:2331-2, SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-2 |
| SLES 12 SP1 | ucode-intel | 20180703-13.25.1 | SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1 |
| SLES 12 | ucode-intel | 20180703-13.25.1 | SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 11 SP4 | microcode_ctl | 1.17-102.83.24.1 | SUSE-SU-2018:2335-1, SUSE-SU-2018:2076-1 |
| SLES 11 SP3 | microcode_ctl | 1.17-102.83.24.1 | SUSE-SU-2018:2335-1, SUSE-SU-2018:2076-1 |
| SLES for SAP 12 SP3 | ucode-intel | 20180703-13.25.1 | SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1 |
| SLES for SAP 12 SP2 | ucode-intel | 20180703-13.25.1 | SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1 |
| SLES for SAP 12 SP1 | ucode-intel | 20180703-13.25.1 | SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1 |
| SLES for SAP 11 SP4 | microcode_ctl | 1.17-102.83.24.1 | SUSE-SU-2018:2335-1, SUSE-SU-2018:2076-1 |
| SUSE OpenStack Cloud 7 | ucode-intel | 20180703-13.25.1 | SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | microcode_ctl | 1.17-102.83.24.1 | SUSE-SU-2018:2335-1, SUSE-SU-2018:2076-1 |
| SUSE Enterprise Storage 4 | ucode-intel | 20180703-13.25.1 | SUSE-SU-2018:2331-1, SUSE-SU-2018:1935-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | spectre-meltdown-checker | 26.36.0602723-1.1 | openSUSE-SU-2026:11242-1 |
| openSUSE Tumbleweed | ucode-intel | 20210608-1.2 | openSUSE-SU-2024:11478-1 |
Advisories 15
- openSUSE-SU-2026:11242-1 spectre-meltdown-checker-26.36.0602723-1.1 on GA media SUSE / openSUSE Security Updates · Jul 10, 2026
- USN-3756-1 intel-microcode vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026
- DSA-4273-1 intel-microcode - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-4273-2 intel-microcode - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-1446-1 intel-microcode - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2018:2338-1 Security update to ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:1926-1 Security update for ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:1935-2 Recommended update for ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:1935-1 Recommended update for ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11478-1 ucode-intel-20210608-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:2331-1 Security update to ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:2331-2 Security update to ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:2076-1 Security update for microcode_ctl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:2335-1 Security update to ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-2072 Prozessoren verschiedener Hersteller: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Sep 2, 2024
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf
- http://support.lenovo.com/us/en/solutions/LEN-22133
- TA18-141A third-party-advisory
- 1042004 vdb-entry
- 1040949 vdb-entry
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
- https://www.synology.com/support/security/Synology_SA_18_23
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
- VU#180049 third-party-advisory
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013
- 20180522 CPU Side-Channel Information Disclosure Vulnerabilities: May 2018 vendor-advisory
- https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006
- [debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update mailing-list
- DSA-4273 vendor-advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_us
- 104228 vdb-entry
- [debian-lts-announce] 20180727 [SECURITY] [DLA 1446-1] intel-microcode security update mailing-list
- USN-3756-1 vendor-advisory
- https://security.netapp.com/advisory/ntap-20180521-0001/
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf