arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-headers | Apr 27, 2020 | Aug 20, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Aug 20, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Aug 20, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Dec 31, 2018 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | Dec 31, 2018 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libs | Sep 12, 2019 | Aug 20, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 5, 2018 | Aug 3, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 7, 2019 | Aug 20, 2018 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-network-kmp-default | Sep 27, 2018 | Aug 20, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-137-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1021-gcpUpgrade linux-image-3.13.0-160-powerpc64-smpUpgrade linux-image-3.13.0-160-genericUpgrade linux-image-oemUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-137-powerpc64-embUpgrade linux-image-azureUpgrade linux-image-4.15.0-1023-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1023-kvmUpgrade linux-image-4.4.0-137-genericUpgrade linux-image-4.15.0-36-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-160-powerpc-smpUpgrade linux-image-4.4.0-1102-snapdragonUpgrade linux-image-genericUpgrade linux-image-3.13.0-160-powerpc64-embUpgrade linux-image-4.4.0-137-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-36-snapdragonUpgrade linux-image-4.4.0-1035-kvmUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-137-generic-lpaeUpgrade linux-image-4.4.0-137-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1025-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-137-powerpc64-smpUpgrade linux-image-4.15.0-36-lowlatencyUpgrade linux-image-3.13.0-160-generic-lpaeUpgrade linux-image-3.13.0-160-powerpc-e500Upgrade linux-image-4.15.0-1021-oemUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-36-genericUpgrade linux-image-4.4.0-1031-awsUpgrade linux-image-4.4.0-1098-raspi2Upgrade linux-image-4.15.0-1024-raspi2Upgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-3.13.0-160-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-160-lowlatencyUpgrade linux-image-4.4.0-1069-awsUpgrade linux-image-gke | Oct 4, 2018 | Aug 20, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub