UBUNTU-CVE-2018-15572
Dashboard / Vulnerabilities / UBUNTU-CVE-2018-15572
UBUNTU-CVE-2018-15572
Summary:
Details: The spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel before 4.18.1 does not always fill RSB upon a context switch, which makes it easier for attackers to conduct userspace-userspace spectreRSB attacks.
References: https://ubuntu.com/security/CVE-2018-15572, https://git.kernel.org/linus/fdf82a7856b32d905c39afc85e34364491e46346, http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdf82a7856b32d905c39afc85e34364491e46346, https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.1, https://github.com/torvalds/linux/commit/fdf82a7856b32d905c39afc85e34364491e46346, https://ubuntu.com/security/notices/USN-3775-1, https://ubuntu.com/security/notices/USN-3775-2, https://ubuntu.com/security/notices/USN-3776-1, https://ubuntu.com/security/notices/USN-3776-2, https://ubuntu.com/security/notices/USN-3777-1, https://ubuntu.com/security/notices/USN-3777-2, https://ubuntu.com/security/notices/USN-3777-3, https://www.cve.org/CVERecord?id=CVE-2018-15572
Affected packages
Package
Name: linux-aws
Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=trusty
Affected ranges
Type: ECOSYSTEM
Events:
