CVE-2018-15572

 

Published at: - 20-08-2018 04:29

Last modified: - 26-10-2022 01:44

Total changes: - 3

Description

The spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel before 4.18.1 does not always fill RSB upon a context switch, which makes it easier for attackers to conduct userspace-userspace spectreRSB attacks.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://github.com/torvalds/linux/commit/fdf82a7856b32d905c39afc85e34364491e46346
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.1
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdf82a7856b32d905c39afc85e34364491e46346
• DSA-4308-Third Party Advisory
• USN-3777-2-Third Party Advisory
• USN-3777-1-Third Party Advisory
• USN-3776-2-Third Party Advisory
• USN-3776-1-Third Party Advisory
• USN-3775-2-Third Party Advisory
• USN-3775-1-Third Party Advisory
• [debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update-Mailing List, Third Party Advisory
• USN-3777-3-Third Party Advisory

 

Keywords

NVD

 

CVE-2018-15572

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures