The spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel before 4.18.1 does not always fill RSB upon a context switch, which makes it easier for attackers to conduct userspace-userspace spectreRSB attacks.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 19, 2018 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.9.0.1.5.0 on Solaris 11.4Upgrade system/zones/brand/brand-solaris-kz to version 0.5.11-0.175.3.36.0.18.0 on Solaris 11.3Upgrade system/kernel/platform to version 0.5.11-0.175.3.36.0.27.0 on Solaris 11.3 | May 30, 2019 | Aug 20, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 25, 2018 | Jul 20, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 20, 2018 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-docs-azureUpgrade kernel-devel-azureUpgrade kernel-docs | Sep 17, 2018 | Aug 19, 2018 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-4.4.0-137-lowlatencyUpgrade linux-image-4.15.0-1023-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-3.13.0-160-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1069-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-160-powerpc-e500mcUpgrade linux-image-3.13.0-160-generic-lpaeUpgrade linux-image-4.15.0-1025-azureUpgrade linux-image-4.15.0-1021-gcpUpgrade linux-image-4.4.0-137-powerpc64-embUpgrade linux-image-4.4.0-137-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1024-raspi2Upgrade linux-image-3.13.0-160-powerpc64-embUpgrade linux-image-4.4.0-1098-raspi2Upgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-160-genericUpgrade linux-image-4.15.0-1021-oemUpgrade linux-image-4.4.0-1031-awsUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1102-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-137-generic-lpaeUpgrade linux-image-4.15.0-1023-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-160-powerpc-smpUpgrade linux-image-4.4.0-137-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1035-kvmUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.15.0-36-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-4.4.0-137-genericUpgrade linux-image-3.13.0-160-powerpc-e500Upgrade linux-image-4.15.0-36-lowlatencyUpgrade linux-image-oemUpgrade linux-image-3.13.0-160-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-137-powerpc-smpUpgrade linux-image-4.15.0-36-snapdragonUpgrade linux-image-4.15.0-36-generic | Oct 4, 2018 | Aug 19, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub