openSUSE: Security Advisory for kernel (openSUSE-SU-2018:1418-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.3 kernel was updated to 4.4.132 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3639: Information leaks using "Memory Disambiguation" feature in modern CPUs were mitigated, aka "Spectre Variant 4" bnc1087082. A new boot commandline...

Speculative Store Bypass (SSB) – also known as Variant 4

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Stor...

hw: cpu: speculative store bypass

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...

hw: cpu: speculative store bypass

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...

hw: cpu: speculative store bypass

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...

RHEL 7 : libvirt (RHSA-2018:1653)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1653 advisory. - hw: cpu: speculative store bypass CVE-2018-3639 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RHEL 7 : qemu-kvm (RHSA-2018:1661)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1661 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the...

RHEL 7 : kernel (RHSA-2018:1635)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1635 advisory. - hw: cpu: speculative store bypass CVE-2018-3639 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Oracle Linux 6 : kernel (ELSA-2018-1651)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1651 advisory. - x86 x86/kvm: fix CPUID7EDX word 18 mask Jan Stancek 1566893 1566899 CVE-2018-3639 - x86 x86/specctrl: Fix late microcode problem with AMD Waiman Long 1566893...

RHEL 7 : libvirt (RHSA-2018:1668)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1668 advisory. - hw: cpu: speculative store bypass CVE-2018-3639 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Oracle Linux 7 : kernel (ELSA-2018-1629)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1629 advisory. - x86 specctrl: Fix late microcode problem with AMD Waiman Long 1566904 1566905 CVE-2018-3639 - x86 entry: Add missing '$' in IBRS macros Waiman Long 1566904...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1375-1) (Spectre)

The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-3639: Information leaks using 'Memory Disambiguation' feature in modern CPUs were mitigated, aka 'Spectre Variant 4' bnc1087082. A new boot...

RHEL 7 : kernel (RHSA-2018:1636)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1636 advisory. - hw: cpu: speculative store bypass CVE-2018-3639 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RHEL 7 : qemu-kvm (RHSA-2018:1633)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1633 advisory. - hw: cpu: speculative store bypass CVE-2018-3639 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RHEL 6 : qemu-kvm (RHSA-2018:1658)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1658 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1377-1) (Spectre)

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bug was fixed : - CVE-2018-3639: Information leaks using 'Memory Disambiguation' feature in modern CPUs were mitigated, aka 'Spectre Variant 4' bnc1087082. A new boot...

RHEL 6 : libvirt (RHSA-2018:1665)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1665 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

RHEL 6 : qemu-kvm (RHSA-2018:1660)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1660 advisory. - hw: cpu: speculative store bypass CVE-2018-3639 Note that Nessus has not tested for this issue but has instead relied only on the application's...

hw: cpu: speculative store bypass

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...