Skip to content
OpenAdvisories

Description

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.

Affected products

VendorProductAffectedFixed
Intel Intel Core-based microprocessors All —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 4.6.1-1 —
Debian 14 xen 4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8 —
Debian 13 linux 4.6.1-1 —
Debian 13 xen 4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8 —
Debian 12 linux 4.6.1-1 —
Debian 12 xen 4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8 —
Debian 9 xen 4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8 DSA-4232-1
Debian 8 linux 3.16.57-1 DLA-1422-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-gcp-6.11 +4 No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +3 No fix yet —
Ubuntu 16.04 LTS linux 4.4.0-130.156 USN-3696-1
Ubuntu 16.04 LTS linux-aws 4.4.0-1062.71 USN-3696-1
Ubuntu 16.04 LTS linux-kvm 4.4.0-1029.34 USN-3696-1
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1092.100 USN-3696-1
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1095.100 USN-3696-1
Ubuntu 14.04 LTS linux 3.13.0-153.203 USN-3698-1
Ubuntu 14.04 LTS linux-aws 4.4.0-1024.25 USN-3696-2
Ubuntu 14.04 LTS linux-lts-xenial 4.4.0-130.156~14.04.1 USN-3696-2
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1008.10 —
Ubuntu Pro 20.04 LTS linux-azure-fde-5.15 No fix yet —
ReleasePackageFixed inAdvisory
RHEL 7 kernel-rt +10 3.10.0-862.3.3.rt56.809.el7 RHSA-2018:1944
RHEL 7 perf +18 3.10.0-862.3.3.el7 RHSA-2018:1852
RHEL 6 perf +16 2.6.32-754.2.1.el6 RHSA-2018:2164
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 7.4 EUS perf +17 3.10.0-693.47.2.el7 RHSA-2019:1170
Red Hat MRG 2 kernel-rt +10 1:3.10.0-693.35.1.rt56.625.el6rt RHSA-2019:1190, RHSA-2018:2165
ReleasePackageFixed inAdvisory
SLES 15 xen 4.10.1_06-3.3.1 SUSE-SU-2018:1981-1
SLES 12 SP3 kernel-docs +4 4.4.138-94.39.1 SUSE-SU-2018:1772-1
SLES 12 SP3 xen 4.9.2_08-3.35.2 SUSE-SU-2018:2059-1
SLES 12 SP2 kernel-syms +2 4.4.121-92.85.1 SUSE-SU-2018:1855-2, SUSE-SU-2018:1855-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_10 12-2.1 SUSE-SU-2018:2099-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_11 +1 11-2.1 SUSE-SU-2018:2091-1, SUSE-SU-2018:2048-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_13 10-2.1 SUSE-SU-2018:2112-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_14 +1 8-2.1 SUSE-SU-2018:1947-1, SUSE-SU-2018:1942-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_16 +1 7-2.1 SUSE-SU-2018:1944-1, SUSE-SU-2018:1940-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_18 +1 5-2.1 SUSE-SU-2018:1945-1, SUSE-SU-2018:1943-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_20 4-2.1 SUSE-SU-2018:1948-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_21 +1 3-2.1 SUSE-SU-2018:1949-1, SUSE-SU-2018:1946-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_23 1-3.5.1 SUSE-SU-2018:1855-2, SUSE-SU-2018:1855-1
SLES 12 SP2 xen 4.7.6_02-43.36.1 SUSE-SU-2018:2081-2, SUSE-SU-2018:2081-1
SLES 12 SP1 kernel-xen +3 3.12.74-60.64.96.1 SUSE-SU-2018:1761-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_18 +2 10-2.1 SUSE-SU-2018:2100-1, SUSE-SU-2018:2088-1, SUSE-SU-2018:2086-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_21 9-2.1 SUSE-SU-2018:2113-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_22 7-2.1 SUSE-SU-2018:2103-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_23 6-2.1 SUSE-SU-2018:2104-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_24 +2 5-2.1 SUSE-SU-2018:2109-1, SUSE-SU-2018:2097-1, SUSE-SU-2018:2093-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_27 3-2.1 SUSE-SU-2018:2106-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_28 2-2.1 SUSE-SU-2018:2087-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_29 1-2.3.1 SUSE-SU-2018:2110-1, SUSE-SU-2018:1761-1
SLES 12 SP1 xen 4.5.5_24-22.52.3 SUSE-SU-2018:2069-1
SLES 12 kernel-ec2 +4 3.12.61-52.136.1 SUSE-SU-2018:1762-1, SUSE-SU-2018:1761-1
SLES 12 kgraft-patch-SLE12_Update_24 +2 10-2.1 SUSE-SU-2018:2115-1, SUSE-SU-2018:2105-1, SUSE-SU-2018:2102-1
SLES 12 kgraft-patch-SLE12_Update_27 9-2.1 SUSE-SU-2018:2094-1
SLES 12 kgraft-patch-SLE12_Update_28 +1 7-2.1 SUSE-SU-2018:2108-1, SUSE-SU-2018:2098-1
SLES 12 kgraft-patch-SLE12_Update_30 +2 6-2.1 SUSE-SU-2018:2101-1, SUSE-SU-2018:2096-1, SUSE-SU-2018:2095-1
SLES 12 kgraft-patch-SLE12_Update_33 5-2.1 SUSE-SU-2018:2107-1
SLES 12 kgraft-patch-SLE12_Update_34 3-2.1 SUSE-SU-2018:2090-1
SLES 12 kgraft-patch-SLE12_Update_35 2-2.1 SUSE-SU-2018:2114-1
SLES 12 kgraft-patch-SLE12_Update_36 1-1.3.1 SUSE-SU-2018:2111-1, SUSE-SU-2018:1762-1
SLES 12 xen 4.4.4_34-22.71.2 SUSE-SU-2018:2056-1
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 11 SP4 kernel-ec2 +9 3.0.101-108.57.1 SUSE-SU-2018:1821-1
SLES 11 SP4 xen 4.4.4_34-61.32.1 SUSE-SU-2018:2037-1
SLES 11 SP3 kernel-ec2 +7 3.0.101-0.47.106.35.1 SUSE-SU-2018:1849-1
SLES 11 SP3 xen 4.2.5_21-45.25.1 SUSE-SU-2018:2528-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.138-94.39.1 SUSE-SU-2018:1772-1
SLES for SAP 12 SP3 xen 4.9.2_08-3.35.2 SUSE-SU-2018:2059-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.85.1 SUSE-SU-2018:1855-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_10 12-2.1 SUSE-SU-2018:2099-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_11 +1 11-2.1 SUSE-SU-2018:2091-1, SUSE-SU-2018:2048-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_13 10-2.1 SUSE-SU-2018:2112-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_14 +1 8-2.1 SUSE-SU-2018:1947-1, SUSE-SU-2018:1942-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_16 +1 7-2.1 SUSE-SU-2018:1944-1, SUSE-SU-2018:1940-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_18 +1 5-2.1 SUSE-SU-2018:1945-1, SUSE-SU-2018:1943-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_20 4-2.1 SUSE-SU-2018:1948-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_21 +1 3-2.1 SUSE-SU-2018:1949-1, SUSE-SU-2018:1946-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_23 1-3.5.1 SUSE-SU-2018:1855-1
SLES for SAP 12 SP2 xen 4.7.6_02-43.36.1 SUSE-SU-2018:2081-1
SLES for SAP 12 SP1 kernel-xen +3 3.12.74-60.64.96.1 SUSE-SU-2018:1761-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_18 +2 10-2.1 SUSE-SU-2018:2100-1, SUSE-SU-2018:2088-1, SUSE-SU-2018:2086-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_21 9-2.1 SUSE-SU-2018:2113-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_22 7-2.1 SUSE-SU-2018:2103-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_23 6-2.1 SUSE-SU-2018:2104-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_24 +2 5-2.1 SUSE-SU-2018:2109-1, SUSE-SU-2018:2097-1, SUSE-SU-2018:2093-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_27 3-2.1 SUSE-SU-2018:2106-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_28 2-2.1 SUSE-SU-2018:2087-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_29 1-2.3.1 SUSE-SU-2018:2110-1, SUSE-SU-2018:1761-1
SLES for SAP 12 SP1 xen 4.5.5_24-22.52.3 SUSE-SU-2018:2069-1
SLES for SAP 11 SP4 kernel-ec2 +8 3.0.101-108.57.1 SUSE-SU-2018:1821-1
SLES for SAP 11 SP4 xen 4.4.4_34-61.32.1 SUSE-SU-2018:2037-1
SLE Real Time 12 SP3 kernel-rt +3 4.4.138-3.14.1 SUSE-SU-2018:1816-1
SLE Real Time 11 SP4 kernel-rt +3 3.0.101.rt130-69.27.1 SUSE-SU-2018:1846-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_1 10-2.5 SUSE-SU-2018:2250-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_10 +1 4-2.5 SUSE-SU-2018:2271-1, SUSE-SU-2018:2266-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_12 +1 2-2.5 SUSE-SU-2018:2269-1, SUSE-SU-2018:2267-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_14 1-4.5.1 SUSE-SU-2018:1772-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_2 +1 9-2.5 SUSE-SU-2018:2263-1, SUSE-SU-2018:2254-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_4 8-2.5 SUSE-SU-2018:2270-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_5 +2 7-2.5 SUSE-SU-2018:2262-1, SUSE-SU-2018:2255-1, SUSE-SU-2018:2248-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_8 +1 5-2.5 SUSE-SU-2018:2268-1, SUSE-SU-2018:2264-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.85.1 SUSE-SU-2018:1855-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_23 1-3.5.1 SUSE-SU-2018:1855-1
SUSE OpenStack Cloud 7 xen 4.7.6_02-43.36.1 SUSE-SU-2018:2081-1
SUSE Linux Enterprise Point of Sale 11 SP3 kernel-ec2 +6 3.0.101-0.47.106.35.1 SUSE-SU-2018:1849-1
SUSE Linux Enterprise Point of Sale 11 SP3 xen 4.2.5_21-45.25.1 SUSE-SU-2018:2528-1
SUSE Enterprise Storage 4 kernel-syms +2 4.4.121-92.85.1 SUSE-SU-2018:1855-1
SUSE Enterprise Storage 4 kgraft-patch-SLE12-SP2_Update_23 1-3.5.1 SUSE-SU-2018:1855-1
SUSE Enterprise Storage 4 xen 4.7.6_02-43.36.1 SUSE-SU-2018:2081-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed xen 4.15.1_01-1.2 openSUSE-SU-2024:11520-1
ReleasePackageFixed inAdvisory
Alpine v3.24 xen 4.11.0-r0 —
Alpine v3.23 xen 4.11.0-r0 —
Alpine v3.22 xen 4.11.0-r0 —
Alpine v3.21 xen 4.11.0-r0 —
Alpine v3.20 xen 4.11.0-r0 —
Show 15 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 xen 4.11.0-r0 —
Alpine v3.18 xen 4.11.0-r0 —
Alpine v3.17 xen 4.11.0-r0 —
Alpine v3.16 xen 4.11.0-r0 —
Alpine v3.15 xen 4.11.0-r0 —
Alpine v3.14 xen 4.11.0-r0 —
Alpine v3.13 xen 4.11.0-r0 —
Alpine v3.12 xen 4.11.0-r0 —
Alpine v3.11 xen 4.11.0-r0 —
Alpine v3.10 xen 4.11.0-r0 —
Alpine v3.9 xen 4.11.0-r0 —
Alpine v3.8 xen 4.10.1-r3 —
Alpine v3.7 xen 4.9.2-r3 —
Alpine v3.6 xen 4.8.4-r0 —
Alpine v3.5 xen 4.7.6-r0 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 dtrace-modules-3.8.13-118.21.4.el6uek 0.4.5-3.el6 ELSA-2018-4134
Oracle Linux 7 dtrace-modules-3.8.13-118.21.4.el7uek 0.4.5-3.el7 ELSA-2018-4134
Oracle Linux 7 kernel-uek +5 3.8.13-118.21.4.el7uek ELSA-2018-4144, ELSA-2018-4134
Oracle Linux 7 perf +11 3.10.0-862.3.3.el7 ELSA-2018-1852

Advisories 50

References