arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | Apr 27, 2020 | Aug 20, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Aug 20, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Aug 20, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo | Dec 31, 2018 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Dec 31, 2018 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade perf | Sep 12, 2019 | Aug 20, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 5, 2018 | Aug 3, 2018 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 7, 2019 | Aug 20, 2018 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-default | Sep 27, 2018 | Aug 20, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1035-kvmUpgrade linux-image-4.4.0-1102-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-160-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-3.13.0-160-genericUpgrade linux-image-4.4.0-137-powerpc-e500mcUpgrade linux-image-4.15.0-36-generic-lpaeUpgrade linux-image-4.4.0-137-lowlatencyUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-1023-awsUpgrade linux-image-3.13.0-160-powerpc64-embUpgrade linux-image-4.4.0-137-genericUpgrade linux-image-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-36-snapdragonUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1021-gcpUpgrade linux-image-4.15.0-1023-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-137-powerpc64-embUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-160-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-36-genericUpgrade linux-image-4.15.0-1024-raspi2Upgrade linux-image-3.13.0-160-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-36-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-137-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-160-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1069-awsUpgrade linux-image-gkeUpgrade linux-image-4.4.0-137-generic-lpaeUpgrade linux-image-4.4.0-137-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1031-awsUpgrade linux-image-powerpc-e500Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1021-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-3.13.0-160-powerpc-e500mcUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-160-generic-lpaeUpgrade linux-image-4.15.0-1025-azureUpgrade linux-image-4.4.0-1098-raspi2 | Oct 4, 2018 | Aug 20, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub