arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-devel | Apr 27, 2020 | Aug 20, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Aug 20, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Aug 20, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debug | Dec 31, 2018 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Dec 31, 2018 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headers | Sep 12, 2019 | Aug 20, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 5, 2018 | Aug 3, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 7, 2019 | Aug 20, 2018 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-default | Sep 27, 2018 | Aug 20, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-137-powerpc64-smpUpgrade linux-image-4.4.0-137-powerpc-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1069-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-36-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1031-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-160-powerpc-e500mcUpgrade linux-image-4.4.0-1098-raspi2Upgrade linux-image-4.15.0-1025-azureUpgrade linux-image-4.15.0-36-genericUpgrade linux-image-4.15.0-1024-raspi2Upgrade linux-image-3.13.0-160-generic-lpaeUpgrade linux-image-4.4.0-137-generic-lpaeUpgrade linux-image-3.13.0-160-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-1021-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-160-powerpc-e500Upgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-160-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-4.4.0-137-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-160-genericUpgrade linux-image-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1035-kvmUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-36-generic-lpaeUpgrade linux-image-4.4.0-137-powerpc64-embUpgrade linux-image-4.4.0-137-powerpc-e500mcUpgrade linux-image-4.15.0-1021-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1023-kvmUpgrade linux-image-4.15.0-36-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-160-powerpc-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-1023-awsUpgrade linux-image-3.13.0-160-powerpc64-embUpgrade linux-image-4.4.0-137-lowlatencyUpgrade linux-image-4.4.0-1102-snapdragon | Oct 4, 2018 | Aug 20, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub