Oval Definition:oval:com.ubuntu.cosmic:def:201815572000
Revision Date:2018-08-19Version:1
Title:CVE-2018-15572 on Ubuntu 18.10 (cosmic) - high.
Description:The spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel before 4.18.1 does not always fill RSB upon a context switch, which makes it easier for attackers to conduct userspace-userspace spectreRSB attacks. It was discovered that microprocessors utilizing speculative execution and prediction of return addresses via Return Stack Buffer (RSB) may allow unauthorized memory reads via sidechannel attacks. An attacker could use this to expose sensitive information.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2018-15572
Platform(s):Ubuntu 18.10
Product(s):
Definition Synopsis
  • Ubuntu 18.10 (cosmic) is installed.
  • AND Package Information
  • NOT While related to the CVE in some way, the 'linux' package in cosmic is not affected (note: '4.17.0-9.10').
  • OR NOT While related to the CVE in some way, the 'linux-aws' package in cosmic is not affected (note: '4.18.0-1002.3').
  • OR NOT While related to the CVE in some way, the 'linux-azure' package in cosmic is not affected (note: '4.18.0-1003.3').
  • OR NOT While related to the CVE in some way, the 'linux-gcp' package in cosmic is not affected (note: '4.18.0-1002.3').
  • OR NOT While related to the CVE in some way, the 'linux-kvm' package in cosmic is not affected (note: '4.18.0-1002.2').
  • OR NOT While related to the CVE in some way, the 'linux-oem' package in cosmic is not affected (note: '4.15.0-1021.24').
  • OR NOT While related to the CVE in some way, the 'linux-oracle' package in cosmic is not affected.
  • OR NOT While related to the CVE in some way, the 'linux-raspi2' package in cosmic is not affected (note: '4.18.0-1004.6').
  • BACK