Skip to content
OpenAdvisories

Description

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.

Affected products

VendorProductAffectedFixed
Intel Multiple Multiple —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 intel-microcode 3.20180703.1 —
Debian 14 linux 4.17.15-1 —
Debian 14 xen 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 —
Debian 13 intel-microcode 3.20180703.1 —
Debian 13 linux 4.17.15-1 —
Debian 13 xen 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 —
Debian 12 intel-microcode 3.20180703.1 —
Debian 12 linux 4.17.15-1 —
Debian 12 xen 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 —
Debian 9 linux 4.9.110-3+deb9u3 DSA-4279-1
Debian 9 xen 4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10 DSA-4274-1
Debian 8 linux-4.9 4.9.110-3+deb9u4~deb8u1 DLA-1481-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +3 No fix yet —
Ubuntu 18.04 LTS intel-microcode 3.20180807a.0ubuntu0.18.04.1 USN-3756-1
Ubuntu 18.04 LTS linux 4.15.0-32.35 USN-3740-1
Ubuntu 18.04 LTS linux-aws +1 4.15.0-1019.19 USN-3740-1
Ubuntu 18.04 LTS linux-azure 4.15.0-1021.21 USN-3740-1
Ubuntu 18.04 LTS linux-gcp 4.15.0-1017.18 USN-3740-1
Ubuntu 18.04 LTS linux-oem 4.15.0-1015.18 USN-3740-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1020.22 USN-3740-1
Ubuntu 16.04 LTS intel-microcode 3.20180807a.0ubuntu0.16.04.1 USN-3756-1
Ubuntu 16.04 LTS linux 4.4.0-133.159 USN-3741-1
Ubuntu 16.04 LTS linux-aws 4.4.0-1065.75 USN-3741-1
Ubuntu 16.04 LTS linux-azure 4.15.0-1021.21~16.04.1 USN-3740-2
Ubuntu 16.04 LTS linux-gcp 4.15.0-1017.18~16.04.1 USN-3740-2
Ubuntu 16.04 LTS linux-hwe 4.15.0-32.35~16.04.1 USN-3740-2
Ubuntu 16.04 LTS linux-kvm 4.4.0-1031.37 USN-3741-1
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1094.102 USN-3741-1
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1098.103 USN-3741-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS intel-microcode 3.20180807a.0ubuntu0.14.04.1 USN-3756-1
Ubuntu 14.04 LTS linux 3.13.0-155.205 USN-3742-1
Ubuntu 14.04 LTS linux-aws 4.4.0-1027.30 USN-3741-2
Ubuntu 14.04 LTS linux-lts-xenial 4.4.0-133.159~14.04.1 USN-3741-2
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1008.10 —
ReleasePackageFixed inAdvisory
RHEL 7 kernel-rt +10 3.10.0-862.11.6.rt56.819.el7 RHSA-2018:2395
RHEL 7 perf +18 3.10.0-862.11.6.el7 RHSA-2018:2384
RHEL 7 redhat-release-virtualization-host +1 4.2-5.2.el7 RHSA-2018:2403
RHEL 7 redhat-virtualization-host +1 4.2-20180813.0.el7_5 RHSA-2018:2403
RHEL 7 rhev-hypervisor7 7.3-20180813.0.el7ev RHSA-2018:2404
RHEL 7 rhvm-appliance 2:4.2-20180813.0.el7 RHSA-2018:2402
RHEL 6 perf +16 2.6.32-754.3.5.el6 RHSA-2018:2390
RHEL 6 rhev-hypervisor7 7.3-20180813.0.el6ev RHSA-2018:2404
Show 13 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 7.4 EUS perf +18 3.10.0-693.37.4.el7 RHSA-2018:2387
RHEL 7.3 EUS perf +18 3.10.0-514.55.4.el7 RHSA-2018:2388
RHEL 7.2 TUS perf +12 3.10.0-327.71.4.el7 RHSA-2018:2389
RHEL 7.2 E4S perf +12 3.10.0-327.71.4.el7 RHSA-2018:2389
RHEL 7.2 AUS perf +12 3.10.0-327.71.4.el7 RHSA-2018:2389
RHEL 6.7 EUS perf +16 2.6.32-573.60.4.el6 RHSA-2018:2391
RHEL 6.6 TUS perf +10 2.6.32-504.72.4.el6 RHSA-2018:2392
RHEL 6.6 AUS perf +10 2.6.32-504.72.4.el6 RHSA-2018:2392
RHEL 6.5 AUS perf +10 2.6.32-431.91.3.el6 RHSA-2018:2393
RHEL 6.4 AUS perf +9 2.6.32-358.91.4.el6 RHSA-2018:2394
RHEL 5.9 AUS kernel +10 2.6.18-348.41.1.el5 RHSA-2018:2603
RHEL 5 ELS kernel +12 2.6.18-434.el5 RHSA-2018:2602
Red Hat MRG 2 kernel-rt +10 1:3.10.0-693.37.4.rt56.629.el6rt RHSA-2018:2396
ReleasePackageFixed inAdvisory
SLES 15 kernel-azure +2 4.12.14-5.13.1 SUSE-SU-2018:2450-1
SLES 15 kernel-docs +6 4.12.14-25.13.1 SUSE-SU-2018:2380-1
SLES 15 lttng-modules 2.10.0-5.4.2 SUSE-SU-2018:2380-1
SLES 15 ucode-intel 20180807-3.6.1 SUSE-SU-2018:2338-1
SLES 15 xen 4.10.1_08-3.6.1 SUSE-SU-2018:4300-1, SUSE-SU-2018:2409-1
SLES 12 SP3 dpdk +1 16.11.6-8.7.2 SUSE-SU-2018:2328-1
SLES 12 SP3 kernel-azure +2 4.4.143-4.13.1 SUSE-SU-2018:2374-1
SLES 12 SP3 kernel-docs +4 4.4.143-94.47.1 SUSE-SU-2018:2328-1
SLES 12 SP3 lttng-modules 2.7.1-8.4.2 SUSE-SU-2018:2328-1
SLES 12 SP3 ucode-intel 20180807-13.29.1 SUSE-SU-2018:2331-1
SLES 12 SP3 xen 4.9.2_10-3.41.1 SUSE-SU-2018:3490-1, SUSE-SU-2018:2401-1
SLES 12 SP2 kernel-syms +2 4.4.121-92.92.1 SUSE-SU-2018:2344-2, SUSE-SU-2018:2344-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_13 11-2.1 SUSE-SU-2018:2387-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_14 +1 9-2.1 SUSE-SU-2018:2391-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_16 +1 8-2.1 SUSE-SU-2018:2416-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_18 +1 6-2.1 SUSE-SU-2018:2391-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_20 5-2.1 SUSE-SU-2018:2389-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_21 +1 4-2.1 SUSE-SU-2018:2389-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_23 2-2.1 SUSE-SU-2018:2389-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_24 1-3.7.1 SUSE-SU-2018:2344-2, SUSE-SU-2018:2344-1
SLES 12 SP2 lttng-modules 2.7.1-9.4.1 SUSE-SU-2018:2344-2, SUSE-SU-2018:2344-1
SLES 12 SP2 ucode-intel 20180807-13.29.1 SUSE-SU-2018:2331-2, SUSE-SU-2018:2331-1
SLES 12 SP2 xen 4.7.6_04-43.39.1 SUSE-SU-2018:2410-2, SUSE-SU-2018:2410-1
SLES 12 SP1 kernel-xen +3 3.12.74-60.64.99.1 SUSE-SU-2018:2384-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_20 11-2.1 SUSE-SU-2018:2355-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_21 10-2.1 SUSE-SU-2018:2350-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_22 8-2.1 SUSE-SU-2018:2353-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_23 7-2.1 SUSE-SU-2018:2367-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_24 +2 6-2.1 SUSE-SU-2018:2368-1, SUSE-SU-2018:2363-1, SUSE-SU-2018:2359-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_27 4-2.1 SUSE-SU-2018:2348-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_28 +1 3-2.1 SUSE-SU-2018:2364-1, SUSE-SU-2018:2358-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_30 1-2.3.1 SUSE-SU-2018:2384-1
SLES 12 SP1 lttng-modules 2.7.0-4.2.1 SUSE-SU-2018:2384-1
SLES 12 SP1 ucode-intel 20180807-13.29.1 SUSE-SU-2018:2331-1
SLES 12 SP1 xen 4.5.5_26-22.55.2 SUSE-SU-2018:2480-1
SLES 12 kernel-ec2 +4 3.12.61-52.141.1 SUSE-SU-2018:2384-1, SUSE-SU-2018:2362-1
SLES 12 kgraft-patch-SLE12_Update_26 11-2.1 SUSE-SU-2018:2352-1
SLES 12 kgraft-patch-SLE12_Update_27 10-2.1 SUSE-SU-2018:2346-1
SLES 12 kgraft-patch-SLE12_Update_28 +1 8-2.1 SUSE-SU-2018:2351-1, SUSE-SU-2018:2347-1
SLES 12 kgraft-patch-SLE12_Update_30 +2 7-2.1 SUSE-SU-2018:2356-1, SUSE-SU-2018:2354-1, SUSE-SU-2018:2349-1
SLES 12 kgraft-patch-SLE12_Update_33 6-2.1 SUSE-SU-2018:2341-1
SLES 12 kgraft-patch-SLE12_Update_34 4-2.1 SUSE-SU-2018:2345-1
SLES 12 kgraft-patch-SLE12_Update_35 +1 3-2.1 SUSE-SU-2018:2369-1, SUSE-SU-2018:2342-1
SLES 12 kgraft-patch-SLE12_Update_37 1-1.5.1 SUSE-SU-2018:2362-1
SLES 12 lttng-modules 2.4.1-16.6.1 SUSE-SU-2018:2362-1
SLES 12 ucode-intel 20180807-13.29.1 SUSE-SU-2018:2331-1
SLES 12 xen 4.4.4_36-22.74.1 SUSE-SU-2018:2483-1
Show 14 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 11 SP4 kernel-ec2 +9 3.0.101-108.68.1 SUSE-SU-2018:2332-1
SLES 11 SP4 microcode_ctl 1.17-102.83.27.1 SUSE-SU-2018:2335-1
SLES 11 SP4 xen 4.4.4_36-61.37.2 SUSE-SU-2018:2482-1
SLES 11 SP3 kernel-ec2 +7 3.0.101-0.47.106.43.1 SUSE-SU-2018:2366-1
SLES 11 SP3 microcode_ctl 1.17-102.83.27.1 SUSE-SU-2018:2335-1
SLES 11 SP3 xen 4.2.5_21-45.25.1 SUSE-SU-2018:2528-1
SLES for SAP 12 SP3 dpdk +1 16.11.6-8.7.2 SUSE-SU-2018:2328-1
SLES for SAP 12 SP3 kernel-azure +1 4.4.143-4.13.1 SUSE-SU-2018:2374-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.143-94.47.1 SUSE-SU-2018:2328-1
SLES for SAP 12 SP3 lttng-modules 2.7.1-8.4.2 SUSE-SU-2018:2328-1
SLES for SAP 12 SP3 ucode-intel 20180807-13.29.1 SUSE-SU-2018:2331-1
SLES for SAP 12 SP3 xen 4.9.2_10-3.41.1 SUSE-SU-2018:3490-1, SUSE-SU-2018:2401-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.92.1 SUSE-SU-2018:2344-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_13 11-2.1 SUSE-SU-2018:2387-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_14 +1 9-2.1 SUSE-SU-2018:2391-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_16 +1 8-2.1 SUSE-SU-2018:2416-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_18 +1 6-2.1 SUSE-SU-2018:2391-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_20 5-2.1 SUSE-SU-2018:2389-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_21 +1 4-2.1 SUSE-SU-2018:2389-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_23 2-2.1 SUSE-SU-2018:2389-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_24 1-3.7.1 SUSE-SU-2018:2344-1
SLES for SAP 12 SP2 lttng-modules 2.7.1-9.4.1 SUSE-SU-2018:2344-1
SLES for SAP 12 SP2 ucode-intel 20180807-13.29.1 SUSE-SU-2018:2331-1
SLES for SAP 12 SP2 xen 4.7.6_04-43.39.1 SUSE-SU-2018:2410-1
SLES for SAP 12 SP1 kernel-xen +3 3.12.74-60.64.99.1 SUSE-SU-2018:2384-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_20 11-2.1 SUSE-SU-2018:2355-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_21 10-2.1 SUSE-SU-2018:2350-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_22 8-2.1 SUSE-SU-2018:2353-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_23 7-2.1 SUSE-SU-2018:2367-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_24 +2 6-2.1 SUSE-SU-2018:2368-1, SUSE-SU-2018:2363-1, SUSE-SU-2018:2359-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_27 4-2.1 SUSE-SU-2018:2348-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_28 +1 3-2.1 SUSE-SU-2018:2364-1, SUSE-SU-2018:2358-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_30 1-2.3.1 SUSE-SU-2018:2384-1
SLES for SAP 12 SP1 lttng-modules 2.7.0-4.2.1 SUSE-SU-2018:2384-1
SLES for SAP 12 SP1 ucode-intel 20180807-13.29.1 SUSE-SU-2018:2331-1
SLES for SAP 12 SP1 xen 4.5.5_26-22.55.2 SUSE-SU-2018:2480-1
SLES for SAP 11 SP4 kernel-ec2 +8 3.0.101-108.68.1 SUSE-SU-2018:2332-1
SLES for SAP 11 SP4 microcode_ctl 1.17-102.83.27.1 SUSE-SU-2018:2335-1
SLES for SAP 11 SP4 xen 4.4.4_36-61.37.2 SUSE-SU-2018:2482-1
SLE Real Time 12 SP3 kernel-rt +3 4.4.147-3.20.1 SUSE-SU-2018:2596-1
SLE Real Time 11 SP4 kernel-rt +3 3.0.101.rt130-69.33.1 SUSE-SU-2018:2637-1
SLE Live Patching 15 kernel-default 4.12.14-25.13.1 SUSE-SU-2018:2381-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_0 2-4.1 SUSE-SU-2018:2474-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_1 +1 2-2.1 SUSE-SU-2018:2473-1, SUSE-SU-2018:2472-1
SLE Live Patching 15 kernel-livepatch-tools 1.1-5.3.1 SUSE-SU-2018:2426-1
SLE Live Patching 12 SP3 kgraft 1.0-23.9.1 SUSE-SU-2018:2394-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_1 11-2.1 SUSE-SU-2018:2413-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_10 +1 5-2.1 SUSE-SU-2018:2414-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_12 +1 3-2.1 SUSE-SU-2018:2414-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_14 +1 2-2.1 SUSE-SU-2018:2963-1, SUSE-SU-2018:2426-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_16 1-4.5.1 SUSE-SU-2018:2328-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_2 +1 10-2.1 SUSE-SU-2018:2413-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_4 9-2.1 SUSE-SU-2018:2416-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_5 +2 8-2.1 SUSE-SU-2018:2416-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_8 +1 6-2.1 SUSE-SU-2018:2416-1
SLE Live Patching 12 kgraft 1.0-23.9.1 SUSE-SU-2018:2394-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.92.1 SUSE-SU-2018:2344-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_24 1-3.7.1 SUSE-SU-2018:2344-1
SUSE OpenStack Cloud 7 lttng-modules 2.7.1-9.4.1 SUSE-SU-2018:2344-1
SUSE OpenStack Cloud 7 ucode-intel 20180807-13.29.1 SUSE-SU-2018:2331-1
SUSE OpenStack Cloud 7 xen 4.7.6_04-43.39.1 SUSE-SU-2018:2410-1
SUSE Linux Enterprise Point of Sale 11 SP3 kernel-ec2 +6 3.0.101-0.47.106.43.1 SUSE-SU-2018:2366-1
SUSE Linux Enterprise Point of Sale 11 SP3 microcode_ctl 1.17-102.83.27.1 SUSE-SU-2018:2335-1
SUSE Linux Enterprise Point of Sale 11 SP3 xen 4.2.5_21-45.25.1 SUSE-SU-2018:2528-1
SUSE Enterprise Storage 4 kernel-syms +2 4.4.121-92.92.1 SUSE-SU-2018:2344-1
SUSE Enterprise Storage 4 kgraft-patch-SLE12-SP2_Update_24 1-3.7.1 SUSE-SU-2018:2344-1
SUSE Enterprise Storage 4 lttng-modules 2.7.1-9.4.1 SUSE-SU-2018:2344-1
SUSE Enterprise Storage 4 ucode-intel 20180807-13.29.1 SUSE-SU-2018:2331-1
SUSE Enterprise Storage 4 xen 4.7.6_04-43.39.1 SUSE-SU-2018:2410-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed xen 4.15.1_01-1.2 openSUSE-SU-2024:11520-1
ReleasePackageFixed inAdvisory
Alpine v3.24 xen 4.11.1-r0 —
Alpine v3.23 xen 4.11.1-r0 —
Alpine v3.22 xen 4.11.1-r0 —
Alpine v3.21 xen 4.11.1-r0 —
Alpine v3.20 xen 4.11.1-r0 —
Show 13 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 xen 4.11.1-r0 —
Alpine v3.18 xen 4.11.1-r0 —
Alpine v3.17 xen 4.11.1-r0 —
Alpine v3.16 xen 4.11.1-r0 —
Alpine v3.15 xen 4.11.1-r0 —
Alpine v3.14 xen 4.11.1-r0 —
Alpine v3.13 xen 4.11.1-r0 —
Alpine v3.12 xen 4.11.1-r0 —
Alpine v3.11 xen 4.11.1-r0 —
Alpine v3.10 xen 4.11.1-r0 —
Alpine v3.9 xen 4.11.1-r0 —
Alpine v3.8 xen 4.10.1-r3 —
Alpine v3.6 xen 4.8.5-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 perf +7 4.14.62-70.117.amzn2 ALAS2-2018-1058

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 kernel-uek +5 4.1.12-124.18.5.el7uek ELSA-2018-4196, ELSA-2018-4195
Oracle Linux 7 kernel-uek-tools +3 4.14.35-1818.1.6.el7uek ELSA-2018-4195
Oracle Linux 7 perf +11 3.10.0-862.11.6.el7 ELSA-2018-4195, ELSA-2018-2384

Advisories 50

References