Speculative Store Bypass in Intel products - CVE-2018-3639

Vulnerability identifier: #VU12911

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-3639

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to obtain potentially sensitive information on the target system.

The weakness exists due to race conditions in CPU cache processing. A local attacker can conduct a side-channel attack to exploit a flaw in the speculative execution of Load and Store instructions to read privileged memory.

Note: the vulnerability is referred to as "Spectre variant 4".

Intel Atom C3308
Intel Atom Processor E Series
Intel Atom C3958
Intel Atom C3955
Intel Atom C3950
Intel Atom C3858
Intel Atom C3850
Intel Atom C3830
Intel Atom C3808
Intel Atom C3758
Intel Atom C3750
Intel Atom C3708
Intel Atom C3558
Intel Atom C3538
Intel Atom C3508
Intel Atom C3338
Intel Atom Processor A Series
Intel Xeon 7500 series
Intel Xeon 6500 series
Intel Xeon 5600 series
Intel Xeon 5500 series
Intel Xeon 3600 series
Intel Xeon 3400 series
Intel Core M 32nm
Intel Core M 45nm
Intel Core i7 32nm
Intel Core i7 45nm
Intel Core i5 32nm
Intel Core i5 45nm
Intel Core i3 32nm
Intel Core i3 45nm
Intel Atom x5-E3930
Intel Pentium Silver N5000 Processors
Intel Pentium Silver Series J5005
Intel Pentium N4200
Intel Pentium N4100
Intel Celeron N4000 Processors
Intel Celeron J4205
Intel Celeron N3450
Intel Celeron J4105
Intel Celeron J3455
Intel Celeron J3355
Intel Atom Processor Z Series
Intel Atom T5700
Intel Atom T5500
Intel Atom x7-E3950
Intel Atom x5-E3940
Intel Celeron J4005
Intel Xeon E3
Intel Xeon E7
Intel Xeon E5
EMC Isilon OneFS

Debian Linux
Amazon Linux AMI
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server for SAP Applications 12
Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)
IBM AIX
VMware ESXi
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for Power, big endian
Red Hat Virtualization - ELS
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux Server - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for IBM System z (Structure A)
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Power, little endian
IBM i
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
macOS
Oracle Solaris
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
SUSE Linux Enterprise Server 12 SP2 BCL
SUSE Linux Enterprise Server
Slackware Linux
Opensuse
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Module for Live Patching
Fedora
MRG Realtime
IBM VIOS
kernel (Red Hat package)
kernel-rt (Red Hat package)
xen (Alpine package)
kernel-alt (Red Hat package)
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
rhev-hypervisor7 (Red Hat package)
openjdk8 (Alpine package)
openSUSE Leap
libvirt (Red Hat package)
qemu-kvm (Red Hat package)
kernel-livepatch-4_12_14-150_78-default
kernel-livepatch-4_12_14-150_78-default-debuginfo
java-1_7_0-openjdk-debuginfo
java-1_7_0-openjdk
java-1_7_0-openjdk-debugsource
java-1_7_0-openjdk-headless-debuginfo
java-1_7_0-openjdk-demo
java-1_7_0-openjdk-headless
java-1_7_0-openjdk-demo-debuginfo
java-1_7_0-openjdk-devel
java-1_7_0-openjdk-devel-debuginfo
qemu-kvm-rhev (Red Hat package)
qemu
kernel-xen-base
kernel-source
kernel-default-devel
kernel-syms
kernel-xen
kernel-default
kernel-trace
kernel-default-base
kernel-ec2
kernel-ec2-devel
kernel-trace-base
kernel-ec2-base
kernel-xen-devel
kernel-trace-devel
rhevm-setup-plugins (Red Hat package)
rhevm (Red Hat package)
libvirt
rhvm-setup-plugins (Red Hat package)
kernel-default-debuginfo
kernel-macros
kernel-default-debugsource
kernel-default-base-debuginfo
kernel-devel
xen
kernel-source-azure
kernel-azure-debuginfo
kernel-devel-azure
kernel-azure-debugsource
kernel-azure-base
kernel-azure-base-debuginfo
kernel-syms-azure
kernel-azure
kernel-azure-devel
kernel-vanilla-base
kernel-vanilla-base-debuginfo
kernel-vanilla-debuginfo
kernel-vanilla-debugsource
reiserfs-kmp-default
reiserfs-kmp-default-debuginfo
kernel-default-man
kernel-zfcpdump-debuginfo
kernel-zfcpdump-debugsource
kernel-default-livepatch
cluster-md-kmp-default
cluster-md-kmp-default-debuginfo
ocfs2-kmp-default
gfs2-kmp-default-debuginfo
gfs2-kmp-default
dlm-kmp-default-debuginfo
dlm-kmp-default
ocfs2-kmp-default-debuginfo
kernel-default-devel-debuginfo
kernel-obs-build
kernel-obs-build-debugsource
kernel-docs
kernel
Red Hat Gluster Storage Server for On-premise
Red Hat Virtualization
Red Hat Virtualization for IBM Power LE
vCenter Server
Red Hat Virtualization Host
Red Hat Virtualization Manager
VMware Fusion
VMware Workstation
Red Hat OpenStack
Red Hat OpenStack for IBM Power
Oracle Communications LSMS
Dell EMC Data Protection Search
EMC Integrated Data Protection Appliance
Data Domain Cloud Disaster Recovery

The CPU vendors are providing software and firmware updates to mitigate the applicable vulnerabilities to operating system vendors and system manufacturers.

kernel (Red Hat package) - addressed in versions 2.6.18-348.40.1.el5, 2.6.18-433.el5, 2.6.32-358.88.4.el6, 2.6.32-358.91.4.el6, 2.6.32-431.89.4.el6, 2.6.32-504.69.3.el6, 2.6.32-504.72.1.el6, 2.6.32-573.55.4.el6, 2.6.32-573.59.1.el6, 2.6.32-573.60.1.el6, 2.6.32-696.30.1.el6, 2.6.32-754.2.1.el6, 3.10.0-327.66.5.el7, 3.10.0-327.71.1.el7, 3.10.0-514.48.5.el7, 3.10.0-514.51.1.el7, 3.10.0-514.53.1.el7, 3.10.0-693.25.7.el7, 3.10.0-693.33.1.el7, 3.10.0-693.37.4.el7, 3.10.0-862.3.2.el7, 3.10.0-862.6.3.el7
kernel-rt (Red Hat package) - addressed in versions 3.10.0-693.25.7.rt56.615.el6rt, 3.10.0-693.37.4.rt56.629.el6rt, 3.10.0-862.3.2.rt56.808.el7, 3.10.0-862.6.3.rt56.811.el7
xen (Alpine package) - update to 4.7.6-r0
kernel-alt (Red Hat package) - addressed in versions 4.14.0-49.8.1.el7a, 4.14.0-115.el7a
rhev-hypervisor7 (Red Hat package) - addressed in versions 7.3-20180710.1.el6ev, 7.3-20180710.1.el7ev
openjdk8 (Alpine package) - update to 8.181.13-r0
Oracle Communications LSMS - update to 13.4
libvirt (Red Hat package) - addressed in versions 0.10.2-18.el6_4.17, 0.10.2-18.el6_4.18, 0.10.2-29.el6_5.16, 0.10.2-29.el6_5.17, 0.10.2-46.el6_6.8, 0.10.2-46.el6_6.9, 1.2.17-13.el7_2.8, 1.2.17-13.el7_2.9
qemu-kvm (Red Hat package) - addressed in versions 0.12.1.2-2.355.el6_4.11, 0.12.1.2-2.355.el6_4.12, 0.12.1.2-2.415.el6_5.18, 0.12.1.2-2.415.el6_5.19, 0.12.1.2-2.448.el6_6.6, 1.5.3-105.el7_2.17
kernel-livepatch-4_12_14-150_78-default - update to 1-1.3.1
kernel-livepatch-4_12_14-150_78-default-debuginfo - update to 1-1.3.1
java-1_7_0-openjdk-debuginfo - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-debugsource - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-headless-debuginfo - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-demo - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-headless - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-demo-debuginfo - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-devel - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-devel-debuginfo - update to 1.7.0.311-43.50.2
EMC Integrated Data Protection Appliance - update to 2.3
qemu-kvm-rhev (Red Hat package) - update to 2.6.0-28.el7_3.17
qemu - addressed in versions 2.10.1-4.fc27, 2.11.1-3.fc28
kernel-xen-base - update to 3.0.101-108.144.1
kernel-source - addressed in versions 3.0.101-108.144.1, 4.4.121-92.208.1, 4.12.14-150.78.1
kernel-default-devel - addressed in versions 3.0.101-108.144.1, 4.4.121-92.208.1, 4.12.14-150.78.1
kernel-syms - addressed in versions 3.0.101-108.144.1, 4.4.121-92.208.1, 4.12.14-150.78.1
kernel-xen - update to 3.0.101-108.144.1
kernel-default - addressed in versions 3.0.101-108.144.1, 4.4.121-92.208.1, 4.12.14-150.78.1
kernel-trace - update to 3.0.101-108.144.1
kernel-default-base - addressed in versions 3.0.101-108.144.1, 4.4.121-92.208.1, 4.12.14-150.78.1
kernel-ec2 - update to 3.0.101-108.144.1
kernel-ec2-devel - update to 3.0.101-108.144.1
kernel-trace-base - update to 3.0.101-108.144.1
kernel-ec2-base - update to 3.0.101-108.144.1
kernel-xen-devel - update to 3.0.101-108.144.1
kernel-trace-devel - update to 3.0.101-108.144.1
rhevm-setup-plugins (Red Hat package) - update to 3.6.7-1.el6ev
rhevm (Red Hat package) - update to 3.6.13.2-0.1.el6
libvirt - addressed in versions 3.7.0-5.fc27, 3.7.0-6.fc27, 4.1.0-3.fc28
rhvm-setup-plugins (Red Hat package) - update to 4.2.10-1.el7ev
kernel-default-debuginfo - addressed in versions 4.4.121-92.208.1, 4.12.14-150.78.1
kernel-macros - addressed in versions 4.4.121-92.208.1, 4.12.14-150.78.1
kernel-default-debugsource - addressed in versions 4.4.121-92.208.1, 4.12.14-150.78.1
kernel-default-base-debuginfo - update to 4.4.121-92.208.1
kernel-devel - addressed in versions 4.4.121-92.208.1, 4.12.14-150.78.1
xen - addressed in versions 4.9.2-4.fc27, 4.10.1-3.fc28
kernel-source-azure - update to 4.12.14-16.146.1
kernel-azure-debuginfo - update to 4.12.14-16.146.1
kernel-devel-azure - update to 4.12.14-16.146.1
kernel-azure-debugsource - update to 4.12.14-16.146.1
kernel-azure-base - update to 4.12.14-16.146.1
kernel-azure-base-debuginfo - update to 4.12.14-16.146.1
kernel-syms-azure - update to 4.12.14-16.146.1
kernel-azure - update to 4.12.14-16.146.1
kernel-azure-devel - update to 4.12.14-16.146.1
kernel-vanilla-base - update to 4.12.14-150.78.1
kernel-vanilla-base-debuginfo - update to 4.12.14-150.78.1
kernel-vanilla-debuginfo - update to 4.12.14-150.78.1
kernel-vanilla-debugsource - update to 4.12.14-150.78.1
reiserfs-kmp-default - update to 4.12.14-150.78.1
reiserfs-kmp-default-debuginfo - update to 4.12.14-150.78.1
kernel-default-man - update to 4.12.14-150.78.1
kernel-zfcpdump-debuginfo - update to 4.12.14-150.78.1
kernel-zfcpdump-debugsource - update to 4.12.14-150.78.1
kernel-default-livepatch - update to 4.12.14-150.78.1
cluster-md-kmp-default - update to 4.12.14-150.78.1
cluster-md-kmp-default-debuginfo - update to 4.12.14-150.78.1
ocfs2-kmp-default - update to 4.12.14-150.78.1
gfs2-kmp-default-debuginfo - update to 4.12.14-150.78.1
gfs2-kmp-default - update to 4.12.14-150.78.1
dlm-kmp-default-debuginfo - update to 4.12.14-150.78.1
dlm-kmp-default - update to 4.12.14-150.78.1
ocfs2-kmp-default-debuginfo - update to 4.12.14-150.78.1
kernel-default-devel-debuginfo - update to 4.12.14-150.78.1
kernel-obs-build - update to 4.12.14-150.78.2
kernel-obs-build-debugsource - update to 4.12.14-150.78.2
kernel-docs - update to 4.12.14-150.78.2
kernel - addressed in versions 4.16.11-100.fc26, 4.16.11-200.fc27, 4.16.11-300.fc28
EMC Isilon OneFS - addressed in versions 8.1.0.4, 8.1.2.0
Dell EMC Data Protection Search - update to 18.2
Data Domain Cloud Disaster Recovery - update to 18.3 P1

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html

• Information disclosure in Intel/AMD/ARM CPU
• Information disclosure in Red Hat OpenStack
• Information disclosure in Red Hat Virtualization Manager
• Information disclosure in Red Hat Virtualization
• Information disclosure in Red Hat Virtualization Manager
• Information disclosure in Red Hat Enterprise Linux
• Information disclosure in IBM AIX and VIOS
• Information disclosure in Red Hat Virtualization
• OpenSUSE Linux update for qemu
• Information disclosure in VMware products
• Debian update for xen
• OpenSUSE Linux update for the Linux Kernel
• OpenSUSE Linux update for the Linux Kernel
• Red Hat update for rhev-hypervisor7
• Red Hat update for redhat-virtualization-host
• Red Hat update for virtualization-host
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• OpenSUSE Linux update for xen
• OpenSUSE Linux update for libvirt
• OpenSUSE Linux update for qemu
• OpenSUSE Linux update for xen
• Amazon Linux AMI update for qemu-kvm
• Amazon Linux AMI update for java-1.8.0-openjdk
• Amazon Linux AMI update for kernel
• Amazon Linux AMI update for kernel
• Amazon Linux AMI update for java-1.7.0-openjdk
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• OpenSUSE Linux update for the Linux Kernel
• OpenSUSE Linux update for ucode-intel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Slackware Linux update for Slackware 14.2 kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• OpenSUSE Linux update for libvirt
• Debian update for intel-microcode
• openSUSE update for ucode-intel
• OpenSUSE Linux update for qemu
• Multiple vulnerabilities in IBM AIX and VIOS
• Multiple vulnerabilities in Apple MacOS
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• OpenSUSE Linux update for qemu
• Multiple vulnerabilities in Oracle Sun Systems Products Suite
• Red Hat update for libvirt
• Red Hat update for libvirt
• Red Hat update for kernel
• Red Hat update for libvirt
• Red Hat update for kernel-alt
• Red Hat update for libvirt
• Red Hat update for kernel
• Red Hat update for libvirt
• Red Hat update for qemu-kvm
• Red Hat update for qemu-kvm
• Red Hat update for qemu-kvm
• Red Hat update for libvirt
• Red Hat update for libvirt
• Red Hat update for java-1.8.0-openjdk
• Red Hat update for java-1.7.0-openjdk
• Red Hat update for qemu-kvm-rhev
• Red Hat update for qemu-kvm-rhev
• Red Hat update for qemu-kvm-rhev
• Red Hat update for qemu-kvm-rhev
• Red Hat update for qemu-kvm
• Red Hat update for libvirt
• Red Hat update for kernel
• Red Hat update for qemu-kvm-rhev
• Red Hat update for qemu-kvm
• Red Hat update for kernel
• Red Hat update for java-1.8.0-openjdk
• Red Hat update for java-1.7.0-openjdk
• Red Hat update for kernel-rt
• Red Hat update for kernel-rt
• Red Hat update for rhvm-setup-plugins
• Multiple vulnerabilities in Oracle Communications LSMS
• OpenSUSE Linux update for java-1_8_0-openjdk
• OpenSUSE Linux update for java-1_8_0-openjdk
• OpenSUSE Linux update for java-1_8_0-openjdk
• Speculative Store Bypass in openjdk8 (Alpine package)
• Speculative Store Bypass in xen (Alpine package)
• SUSE update for java-1_7_0-openjdk
• Multiple vulnerabilities in Dell EMC Integrated Data Protection Appliance
• Multiple vulnerabilities in Dell EMC Isilon OneFS
• Multiple vulnerabilities in Dell EMC Data Domain Cloud Disaster Recovery
• Multiple vulnerabilities in Dell EMC Data Protection Search
• RHEV 3.X Hypervisor and Agents for Red Hat Enterprise Linux 7 Extended Life Support update for qemu-kvm-rhev
• Red Hat Enterprise Linux 6.4 Advanced Update Support update for qemu-kvm
• Red Hat Enterprise Linux 6.5 Advanced Update Support update for qemu-kvm
• Red Hat Enterprise Linux 6.6 Advanced Update Support and Red Hat Enterprise Linux 6.6 Telco Extended Update Support update for qemu-kvm
• Red Hat Enterprise Linux 7 update for qemu-kvm
• Red Hat Enterprise Linux 6.4 Advanced Update Support update for libvirt
• Red Hat Enterprise Linux 6.5 Advanced Update Support update for libvirt
• Red Hat Enterprise Linux 6.6 Advanced Update Support and Red Hat Enterprise Linux 6.6 Telco Extended Update Support update for libvirt
• Red Hat Enterprise Linux 7 update for libvirt
• RHEV Manager version 3.6 update for org.ovirt.engine-root
• RHEV Manager version 3.6 update for rhevm-setup-plugins
• Red Hat Enterprise Linux 7.4 Extended Update Support update for kernel
• Red Hat Enterprise Linux 6.4 Advanced Update Support update for kernel
• Red Hat Enterprise MRG 2 update for kernel-rt
• Red Hat Enterprise Linux 6.5 Advanced Update Support update for libvirt
• Red Hat Enterprise Linux 6.5 Advanced Update Support update for qemu-kvm
• Red Hat Enterprise Linux 6.4 Advanced Update Support update for libvirt
• Red Hat Enterprise Linux 6.6 Advanced Update Support and Red Hat Enterprise Linux 6.6 Telco Extended Update Support update for libvirt
• Red Hat Enterprise Linux 6.4 Advanced Update Support update for qemu-kvm
• Red Hat Enterprise Linux 7 update for libvirt
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• Multiple vulnerabilities in Oracle Solaris third-party software
• Multiple vulnerabilities in IBM i
• Fedora 28 update for xen
• Fedora 27 update for xen
• Fedora 27 update for kernel
• Fedora 26 update for kernel
• Fedora 28 update for kernel
• Fedora 28 update for qemu
• Fedora 28 update for libvirt
• Fedora 27 update for qemu
• Fedora 27 update for libvirt
• Fedora 27 update for libvirt
• Red Hat Enterprise Linux 7 update for kernel-alt
• SUSE update for the Linux Kernel
• Multiple vulnerabilities in Oracle Solaris