CVE-2018-15572

6.5MEDIUM

Key Information

Vendor
Debian
Status
Debian Linux
Vendor
CVE Published:
20 August 2018

Summary

The spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel before 4.18.1 does not always fill RSB upon a context switch, which makes it easier for attackers to conduct userspace-userspace spectreRSB attacks.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linu...
x_refsource_MISC
https://usn.ubuntu.com/3776-1/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3776-2/
vendor-advisoryx_refsource_UBUNTU

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.