K26301924 : Linux kernel vulnerability CVE-2018-15594

Security Advisory Description

arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests. (CVE-2018-15594)

Impact

Traffix SDC

When this vulnerability is exploited, an attacker with local access to the system can obtain sensitive information from the system memory for a paravirtual guest.

BIG-IP, BIG-IQ, F5 iWorkflow, and Enterprise Manager

There is no impact; these F5 products are not affected by this vulnerability.