CVE-2018-3665

MEDIUM
5.6
CVSS Score
Published: June 21, 2018 at 08:00 PM UTC
Updated: June 17, 2026 at 01:57 AM UTC
15 products affected across 6 vendorsDebian LinuxUbuntu LinuxEnterprise Linux

Using Intel Core-based microprocessors by Intel Corporation?

Get instant alerts when new vulnerabilities affect Intel Core-based microprocessors - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.6
Exploit prediction
EPSS 0.6%

Description

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

References (25)

VDB Entryx_refsource_BIDThird Party Advisory
http://www.securityfocus.com/bid/104460
VDB Entryx_refsource_SECTRACKThird Party Advisory
http://www.securitytracker.com/id/1041124
VDB Entryx_refsource_SECTRACKThird Party Advisory
http://www.securitytracker.com/id/1041125
Vendor Advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:1852
Vendor Advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:1944
Vendor Advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:2164
Vendor Advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:2165
Vendor Advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/errata/RHSA-2019:1170

CVSS

Attack Vector
LOCAL
Complexity
HIGH
Privileges
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-200

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card