{"id":"CVE-2018-3640","aliases":["DEBIAN-CVE-2018-3640","DLA-1446-1","DSA-4273-1","DSA-4273-2","EUVD-2018-15494","GHSA-wm4v-x65g-m25r","MGASA-2018-0322","SUSE-SU-2018:1926-1","SUSE-SU-2018:1935-1","SUSE-SU-2018:1935-2","SUSE-SU-2018:2076-1","SUSE-SU-2018:2331-1","SUSE-SU-2018:2331-2","SUSE-SU-2018:2335-1","SUSE-SU-2018:2338-1","UBUNTU-CVE-2018-3640","USN-3756-1","openSUSE-SU-2024:11478-1","openSUSE-SU-2026:11242-1"],"status":"published","title":"Systems with microprocessors utilizing speculative execution and that perform speculative reads...","description":"Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.","severity":{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0714,"percentile":0.94311,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203"],"published":"2018-05-21T21:00:00Z","modified":"2026-10-23T18:03:21Z","fixes":[{"ecosystem":"Debian:12","package":"intel-microcode","fixed_in":["3.20180703.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"intel-microcode","fixed_in":["3.20180703.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"intel-microcode","fixed_in":["3.20180703.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"intel-microcode","fixed_in":["3.20180807a.0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"intel-microcode","fixed_in":["3.20180807a.0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"intel-microcode","fixed_in":["3.20180807a.0ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20180703.1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1"]},{"source":"osv","ecosystem":"Debian:13","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20180703.1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1"]},{"source":"osv","ecosystem":"Debian:14","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20180703.1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1"]},{"source":"osv","ecosystem":"Debian:8","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20180703.2~deb8u1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20180703.2~deb9u1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20180807a.1~deb9u1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20180703-1.mga6.nonfree"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180703-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180703-13.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180703-13.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180703-13.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180703-13.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180703-13.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180703-13.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180703-13.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180703-13.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180703-13.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180703-13.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180703-13.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-102.83.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-102.83.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-102.83.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-102.83.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-102.83.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180807-13.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180807-13.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180807-13.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180807-13.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180807-13.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180807-13.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180807-13.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180807-13.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180807-13.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180807-13.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180807-13.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-102.83.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-102.83.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-102.83.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-102.83.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-102.83.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180807-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20180807a.0ubuntu0.14.04.1"}]}],"versions":["1.20130906.1ubuntu2","1.20130906.1ubuntu3","2.20140122.1","2.20140430.1ubuntu1","2.20140624-t-1ubuntu2","3.20180108.0~ubuntu14.04.2","3.20180108.0+really20170707ubuntu14.04.1","3.20180312.0~ubuntu14.04.1","3.20180425.1~ubuntu0.14.04.1","3.20180425.1~ubuntu0.14.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20180807a.0ubuntu0.16.04.1"}]}],"versions":["3.20150121.1","3.20151106.1","3.20170707.1~ubuntu16.04.0","3.20180108.0~ubuntu16.04.2","3.20180108.0+really20170707ubuntu16.04.1","3.20180312.0~ubuntu16.04.1","3.20180425.1~ubuntu0.16.04.1","3.20180425.1~ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20180807a.0ubuntu0.18.04.1"}]}],"versions":["3.20170707.1","3.20171117.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.0~ubuntu18.04.1","3.20180425.1~ubuntu0.18.04.1","3.20180425.1~ubuntu0.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20180807a.0ubuntu0.14.04.1"}]}],"versions":["1.20130906.1ubuntu2","1.20130906.1ubuntu3","2.20140122.1","2.20140430.1ubuntu1","2.20140624-t-1ubuntu2","3.20180108.0~ubuntu14.04.2","3.20180108.0+really20170707ubuntu14.04.1","3.20180312.0~ubuntu14.04.1","3.20180425.1~ubuntu0.14.04.1","3.20180425.1~ubuntu0.14.04.2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20180807a.0ubuntu0.16.04.1"}]}],"versions":["3.20150121.1","3.20151106.1","3.20170707.1~ubuntu16.04.0","3.20180108.0~ubuntu16.04.2","3.20180108.0+really20170707ubuntu16.04.1","3.20180312.0~ubuntu16.04.1","3.20180425.1~ubuntu0.16.04.1","3.20180425.1~ubuntu0.16.04.2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20180807a.0ubuntu0.18.04.1"}]}],"versions":["3.20170707.1","3.20171117.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.0~ubuntu18.04.1","3.20180425.1~ubuntu0.18.04.1","3.20180425.1~ubuntu0.18.04.2"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210608-1.2"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"spectre-meltdown-checker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.36.0602723-1.1"}]}],"bundled":28}],"products":[{"vendor":"arm","product":"cortex-a"},{"vendor":"intel","product":"atom_c"},{"vendor":"intel","product":"atom_e"},{"vendor":"intel","product":"atom_z"},{"vendor":"intel","product":"celeron_j"},{"vendor":"intel","product":"celeron_n"},{"vendor":"intel","product":"core_i3"},{"vendor":"intel","product":"core_i5"},{"vendor":"intel","product":"core_i7"},{"vendor":"intel","product":"core_m"},{"vendor":"intel","product":"multiple"},{"vendor":"intel","product":"pentium"},{"vendor":"intel","product":"pentium_j"},{"vendor":"intel","product":"pentium_silver"},{"vendor":"intel","product":"xeon_e-1105c"},{"vendor":"intel","product":"xeon_e3"},{"vendor":"intel","product":"xeon_e3_1105c_v2"},{"vendor":"intel","product":"xeon_e3_1125c_v2"},{"vendor":"intel","product":"xeon_e3_12201"},{"vendor":"intel","product":"xeon_e3_12201_v2"},{"vendor":"intel","product":"xeon_e3_1220_v2"},{"vendor":"intel","product":"xeon_e3_1220_v3"},{"vendor":"intel","product":"xeon_e3_1220_v5"},{"vendor":"intel","product":"xeon_e3_1220_v6"},{"vendor":"intel","product":"xeon_e3_1220l_v3"},{"vendor":"intel","product":"xeon_e3_1225"},{"vendor":"intel","product":"xeon_e3_1225_v2"},{"vendor":"intel","product":"xeon_e3_1225_v3"},{"vendor":"intel","product":"xeon_e3_1225_v5"},{"vendor":"intel","product":"xeon_e3_1225_v6"},{"vendor":"intel","product":"xeon_e3_1226_v3"},{"vendor":"intel","product":"xeon_e3_1230"},{"vendor":"intel","product":"xeon_e3_1230_v2"},{"vendor":"intel","product":"xeon_e3_1230_v3"},{"vendor":"intel","product":"xeon_e3_1230_v5"},{"vendor":"intel","product":"xeon_e3_1230_v6"},{"vendor":"intel","product":"xeon_e3_1230l_v3"},{"vendor":"intel","product":"xeon_e3_1231_v3"},{"vendor":"intel","product":"xeon_e3_1235"},{"vendor":"intel","product":"xeon_e3_1235l_v5"},{"vendor":"intel","product":"xeon_e3_1240"},{"vendor":"intel","product":"xeon_e3_1240_v2"},{"vendor":"intel","product":"xeon_e3_1240_v3"},{"vendor":"intel","product":"xeon_e3_1240_v5"},{"vendor":"intel","product":"xeon_e3_1240_v6"},{"vendor":"intel","product":"xeon_e3_1240l_v3"},{"vendor":"intel","product":"xeon_e3_1240l_v5"},{"vendor":"intel","product":"xeon_e3_1241_v3"},{"vendor":"intel","product":"xeon_e3_1245"},{"vendor":"intel","product":"xeon_e3_1245_v2"},{"vendor":"intel","product":"xeon_e3_1245_v3"},{"vendor":"intel","product":"xeon_e3_1245_v5"},{"vendor":"intel","product":"xeon_e3_1245_v6"},{"vendor":"intel","product":"xeon_e3_1246_v3"},{"vendor":"intel","product":"xeon_e3_1258l_v4"},{"vendor":"intel","product":"xeon_e3_1260l"},{"vendor":"intel","product":"xeon_e3_1260l_v5"},{"vendor":"intel","product":"xeon_e3_1265l_v2"},{"vendor":"intel","product":"xeon_e3_1265l_v3"},{"vendor":"intel","product":"xeon_e3_1265l_v4"},{"vendor":"intel","product":"xeon_e3_1268l_v3"},{"vendor":"intel","product":"xeon_e3_1268l_v5"},{"vendor":"intel","product":"xeon_e3_1270"},{"vendor":"intel","product":"xeon_e3_1270_v2"},{"vendor":"intel","product":"xeon_e3_1270_v3"},{"vendor":"intel","product":"xeon_e3_1270_v5"},{"vendor":"intel","product":"xeon_e3_1270_v6"},{"vendor":"intel","product":"xeon_e3_1271_v3"},{"vendor":"intel","product":"xeon_e3_1275_v2"},{"vendor":"intel","product":"xeon_e3_1275_v3"},{"vendor":"intel","product":"xeon_e3_1275_v5"},{"vendor":"intel","product":"xeon_e3_1275_v6"},{"vendor":"intel","product":"xeon_e3_1275l_v3"},{"vendor":"intel","product":"xeon_e3_1276_v3"},{"vendor":"intel","product":"xeon_e3_1278l_v4"},{"vendor":"intel","product":"xeon_e3_1280"},{"vendor":"intel","product":"xeon_e3_1280_v2"},{"vendor":"intel","product":"xeon_e3_1280_v3"},{"vendor":"intel","product":"xeon_e3_1280_v5"},{"vendor":"intel","product":"xeon_e3_1280_v6"},{"vendor":"intel","product":"xeon_e3_1281_v3"},{"vendor":"intel","product":"xeon_e3_1285_v3"},{"vendor":"intel","product":"xeon_e3_1285_v4"},{"vendor":"intel","product":"xeon_e3_1285_v6"},{"vendor":"intel","product":"xeon_e3_1285l_v3"},{"vendor":"intel","product":"xeon_e3_1285l_v4"},{"vendor":"intel","product":"xeon_e3_1286_v3"},{"vendor":"intel","product":"xeon_e3_1286l_v3"},{"vendor":"intel","product":"xeon_e3_1290"},{"vendor":"intel","product":"xeon_e3_1290_v2"},{"vendor":"intel","product":"xeon_e3_1501l_v6"},{"vendor":"intel","product":"xeon_e3_1501m_v6"},{"vendor":"intel","product":"xeon_e3_1505l_v5"},{"vendor":"intel","product":"xeon_e3_1505l_v6"},{"vendor":"intel","product":"xeon_e3_1505m_v5"},{"vendor":"intel","product":"xeon_e5"},{"vendor":"intel","product":"xeon_e5_1428l"},{"vendor":"intel","product":"xeon_e5_1428l_v2"},{"vendor":"intel","product":"xeon_e5_1428l_v3"},{"vendor":"intel","product":"xeon_e5_1620"},{"vendor":"intel","product":"xeon_e5_1620_v2"},{"vendor":"intel","product":"xeon_e5_1620_v3"},{"vendor":"intel","product":"xeon_e5_1620_v4"},{"vendor":"intel","product":"xeon_e5_1630_v3"},{"vendor":"intel","product":"xeon_e5_1630_v4"},{"vendor":"intel","product":"xeon_e5_1650"},{"vendor":"intel","product":"xeon_e5_1650_v2"},{"vendor":"intel","product":"xeon_e5_1650_v3"},{"vendor":"intel","product":"xeon_e5_1650_v4"},{"vendor":"intel","product":"xeon_e5_1660"},{"vendor":"intel","product":"xeon_e5_1660_v2"},{"vendor":"intel","product":"xeon_e5_1660_v3"},{"vendor":"intel","product":"xeon_e5_1660_v4"},{"vendor":"intel","product":"xeon_e5_1680_v3"},{"vendor":"intel","product":"xeon_e5_1680_v4"},{"vendor":"intel","product":"xeon_e5_2403"},{"vendor":"intel","product":"xeon_e5_2403_v2"},{"vendor":"intel","product":"xeon_e5_2407"},{"vendor":"intel","product":"xeon_e5_2407_v2"},{"vendor":"intel","product":"xeon_e5_2408l_v3"},{"vendor":"intel","product":"xeon_e5_2418l"},{"vendor":"intel","product":"xeon_e5_2418l_v2"},{"vendor":"intel","product":"xeon_e5_2418l_v3"},{"vendor":"intel","product":"xeon_e5_2420"},{"vendor":"intel","product":"xeon_e5_2420_v2"},{"vendor":"intel","product":"xeon_e5_2428l"},{"vendor":"intel","product":"xeon_e5_2428l_v2"},{"vendor":"intel","product":"xeon_e5_2428l_v3"},{"vendor":"intel","product":"xeon_e5_2430"},{"vendor":"intel","product":"xeon_e5_2430_v2"},{"vendor":"intel","product":"xeon_e5_2430l"},{"vendor":"intel","product":"xeon_e5_2430l_v2"},{"vendor":"intel","product":"xeon_e5_2438l_v3"},{"vendor":"intel","product":"xeon_e5_2440"},{"vendor":"intel","product":"xeon_e5_2440_v2"},{"vendor":"intel","product":"xeon_e5_2448l"},{"vendor":"intel","product":"xeon_e5_2448l_v2"},{"vendor":"intel","product":"xeon_e5_2450"},{"vendor":"intel","product":"xeon_e5_2450_v2"},{"vendor":"intel","product":"xeon_e5_2450l"},{"vendor":"intel","product":"xeon_e5_2450l_v2"},{"vendor":"intel","product":"xeon_e5_2470"},{"vendor":"intel","product":"xeon_e5_2470_v2"},{"vendor":"intel","product":"xeon_e5_2603"},{"vendor":"intel","product":"xeon_e5_2603_v2"},{"vendor":"intel","product":"xeon_e5_2603_v3"},{"vendor":"intel","product":"xeon_e5_2603_v4"},{"vendor":"intel","product":"xeon_e5_2608l_v3"},{"vendor":"intel","product":"xeon_e5_2608l_v4"},{"vendor":"intel","product":"xeon_e5_2609"},{"vendor":"intel","product":"xeon_e5_2609_v2"},{"vendor":"intel","product":"xeon_e5_2609_v3"},{"vendor":"intel","product":"xeon_e5_2609_v4"},{"vendor":"intel","product":"xeon_e5_2618l_v2"},{"vendor":"intel","product":"xeon_e5_2618l_v3"},{"vendor":"intel","product":"xeon_e5_2618l_v4"},{"vendor":"intel","product":"xeon_e5_2620"},{"vendor":"intel","product":"xeon_e5_2620_v2"},{"vendor":"intel","product":"xeon_e5_2620_v3"},{"vendor":"intel","product":"xeon_e5_2620_v4"},{"vendor":"intel","product":"xeon_e5_2623_v3"},{"vendor":"intel","product":"xeon_e5_2623_v4"},{"vendor":"intel","product":"xeon_e5_2628l_v2"},{"vendor":"intel","product":"xeon_e5_2628l_v3"},{"vendor":"intel","product":"xeon_e5_2628l_v4"},{"vendor":"intel","product":"xeon_e5_2630"},{"vendor":"intel","product":"xeon_e5_2630_v2"},{"vendor":"intel","product":"xeon_e5_2630_v3"},{"vendor":"intel","product":"xeon_e5_2630_v4"},{"vendor":"intel","product":"xeon_e5_2630l"},{"vendor":"intel","product":"xeon_e5_2630l_v2"},{"vendor":"intel","product":"xeon_e5_2630l_v3"},{"vendor":"intel","product":"xeon_e5_2630l_v4"},{"vendor":"intel","product":"xeon_e5_2637"},{"vendor":"intel","product":"xeon_e5_2637_v2"},{"vendor":"intel","product":"xeon_e5_2637_v3"},{"vendor":"intel","product":"xeon_e5_2637_v4"},{"vendor":"intel","product":"xeon_e5_2640"},{"vendor":"intel","product":"xeon_e5_2640_v2"},{"vendor":"intel","product":"xeon_e5_2640_v3"},{"vendor":"intel","product":"xeon_e5_2640_v4"},{"vendor":"intel","product":"xeon_e5_2643"},{"vendor":"intel","product":"xeon_e5_2643_v2"},{"vendor":"intel","product":"xeon_e5_2643_v3"},{"vendor":"intel","product":"xeon_e5_2643_v4"},{"vendor":"intel","product":"xeon_e5_2648l"},{"vendor":"intel","product":"xeon_e5_2648l_v2"},{"vendor":"intel","product":"xeon_e5_2648l_v3"},{"vendor":"intel","product":"xeon_e5_2648l_v4"},{"vendor":"intel","product":"xeon_e5_2650"},{"vendor":"intel","product":"xeon_e5_2650_v2"},{"vendor":"intel","product":"xeon_e5_2650_v3"},{"vendor":"intel","product":"xeon_e5_2650_v4"},{"vendor":"intel","product":"xeon_e5_2650l"},{"vendor":"intel","product":"xeon_e5_2650l_v2"},{"vendor":"intel","product":"xeon_e5_2650l_v3"},{"vendor":"intel","product":"xeon_e7"},{"vendor":"intel","product":"xeon_gold"},{"vendor":"intel","product":"xeon_platinum"},{"vendor":"intel","product":"xeon_silver"},{"vendor":"intel corporation","product":"multiple"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://support.lenovo.com/us/en/solutions/LEN-22133","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.us-cert.gov/ncas/alerts/TA18-141A","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"http://www.securitytracker.com/id/1042004","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1040949","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://www.synology.com/support/security/Synology_SA_18_23","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://www.kb.cert.org/vuls/id/180049","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","Vendor Advisory","advisory","fix"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.debian.org/security/2018/dsa-4273","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03850en_us","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/104228","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://usn.ubuntu.com/3756-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20180521-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3640"},{"url":"https://github.com/advisories/GHSA-wm4v-x65g-m25r"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-3640","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0322.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23313","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181926-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1087082","tags":["report"]},{"url":"https://bugzilla.suse.com/1087083","tags":["report"]},{"url":"https://bugzilla.suse.com/1100147","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3640","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181935-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1096141","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181935-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182076-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182331-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1089343","tags":["report"]},{"url":"https://bugzilla.suse.com/1104134","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3646","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182331-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182335-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182338-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-3640","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3756-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3640","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-3639","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-3646","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-0543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-0548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-26318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-28956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-20623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54505","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-3640","description":"Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.","status":"published","published":"2018-05-22T12:00:00Z","modified":"2024-09-16T19:31:35.612Z","updated_at":"2026-11-02T14:35:05.262903Z"}],"euvd":[{"id":"EUVD-2018-15494","description":"Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.","status":"published","published":"2018-05-22T12:00:00Z","modified":"2024-09-16T19:31:35Z","updated_at":"2026-11-03T00:55:22.355392Z"}],"ghsa":[{"id":"GHSA-wm4v-x65g-m25r","title":"Systems with microprocessors utilizing speculative execution and that perform speculative reads...","description":"Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.","status":"published","published":"2022-05-13T01:20:14Z","modified":"2023-02-01T05:06:00Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:50:18.532439Z"}],"nvd":[{"id":"CVE-2018-3640","description":"Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.","status":"published","published":"2018-05-22T12:29:00.327Z","modified":"2026-06-17T01:57:36.693Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:04:27.507872Z"}],"osv":[{"id":"CVE-2018-3640","description":"Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.","status":"published","published":"2018-05-22T12:29:00Z","modified":"2026-07-10T10:14:32.830023348Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:09.442568Z"},{"id":"DEBIAN-CVE-2018-3640","description":"Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.","status":"published","published":"2018-05-22T12:29:00.327Z","modified":"2026-10-23T18:03:21.12112412Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"UBUNTU-CVE-2018-3640","description":"Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.","status":"published","published":"2018-05-21T21:00:00Z","modified":"2026-02-04T04:36:21.013374Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:18.33562Z"},{"id":"DLA-1446-1","title":"intel-microcode - security update","status":"published","published":"2018-07-27T00:00:00Z","modified":"2026-03-09T01:00:52.73733Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4273-1","title":"intel-microcode - security update","status":"published","published":"2018-08-16T00:00:00Z","modified":"2026-03-09T02:09:11.429209Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-4273-2","title":"intel-microcode - security update","status":"published","published":"2018-09-16T00:00:00Z","modified":"2026-03-09T02:09:00.902244Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0322","title":"Updated microcode packages fix security vulnerability","description":"This microcode update provides the first set of fixes for Speculative Store\nBypass (SSBD, Spectre v4, CVE-2018-3639) and  Rogue System Register Read\n(RSRE, Spectre v3a, CVE-2018-3640) for Intel Sandybridge server, Ivy Bridge\nserver, Haswell server, Skylake server, Broadwell server, a few HEDT Core\ni7/i9 models.\n\nIncluded is also an AMD cpu microcode fix for family 15h Processor Revision\nID 0x00610f01 missed in the MGASA-2018-0260 update.\n","status":"published","published":"2018-07-25T08:24:17Z","modified":"2026-04-16T06:24:48.15816485Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:11478-1","title":"ucode-intel-20210608-1.2 on GA media","description":"These are all security issues fixed in the ucode-intel-20210608-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:32:37.452288Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2026:11242-1","title":"spectre-meltdown-checker-26.36.0602723-1.1 on GA media","description":"These are all security issues fixed in the spectre-meltdown-checker-26.36.0602723-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-09T00:00:00Z","modified":"2026-07-10T10:00:10.593286162Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"SUSE-SU-2018:1926-1","title":"Security update for ucode-intel","description":"\nThis update for ucode-intel fixes the following issues:\n\nThe microcode bundles was updated to the 20180703 release\n\nFor the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a)\nand helps mitigating CVE-2018-3639 (Spectre v4)  (bsc#1100147 bsc#1087082 bsc#1087083).\n\nMore information on:\n  https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File\n\nFollowing chipsets are fixed in this round:\n\nModel        Stepping F-MO-S/PI      Old-\u003eNew\n\n---- updated platforms ------------------------------------\n\nSNB-EP       C1       6-2d-6/6d 0000061c-\u003e0000061d Xeon E5\nSNB-EP       C2       6-2d-7/6d 00000713-\u003e00000714 Xeon E5\nIVT          C0       6-3e-4/ed 0000042c-\u003e0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K\nIVT          D1       6-3e-7/ed 00000713-\u003e00000714 Xeon E5 v2\nHSX-E/EP/4S  C0       6-3f-2/6f 0000003c-\u003e0000003d Xeon E5 v3\nHSX-EX       E0       6-3f-4/80 00000011-\u003e00000012 Xeon E7 v3\nSKX-SP/D/W/X H0       6-55-4/b7 02000043-\u003e0200004d Xeon Bronze 31xx, Silver 41xx, Gold 51xx/61xx Platinum 81xx, D/W-21xx; Core i9-7xxxX\nBDX-DE       A1       6-56-5/10 0e000009-\u003e0e00000a Xeon D-15x3N\nBDX-ML       B/M/R0   6-4f-1/ef 0b00002c-\u003e0b00002e Xeon E5/E7 v4; Core i7-69xx/68xx\n","status":"published","published":"2018-07-11T13:55:21Z","modified":"2026-02-04T04:23:39.763305Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1935-1","title":"Recommended update for ucode-intel","description":"\n\nThe Intel CPU microcode bundle was updated to the 20180703 release.\n\nFor the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a)\nand helps mitigating CVE-2018-3639 (Spectre v4)  (bsc#1100147 bsc#1087082 bsc#1087083).\n\nMore information on:\n  https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File\n\nFollowing chipsets are fixed in this round:\n\nModel        Stepping F-MO-S/PI      Old-\u003eNew\n\n---- updated platforms ------------------------------------\n\nSNB-EP       C1       6-2d-6/6d 0000061c-\u003e0000061d Xeon E5\nSNB-EP       C2       6-2d-7/6d 00000713-\u003e00000714 Xeon E5\nIVT          C0       6-3e-4/ed 0000042c-\u003e0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K\nIVT          D1       6-3e-7/ed 00000713-\u003e00000714 Xeon E5 v2\nHSX-E/EP/4S  C0       6-3f-2/6f 0000003c-\u003e0000003d Xeon E5 v3\nHSX-EX       E0       6-3f-4/80 00000011-\u003e00000012 Xeon E7 v3\nSKX-SP/D/W/X H0       6-55-4/b7 02000043-\u003e0200004d Xeon Bronze 31xx, Silver 41xx, Gold 51xx/61xx Platinum 81xx, D/W-21xx; Core i9-7xxxX\nBDX-DE       A1       6-56-5/10 0e000009-\u003e0e00000a Xeon D-15x3N\nBDX-ML       B/M/R0   6-4f-1/ef 0b00002c-\u003e0b00002e Xeon E5/E7 v4; Core i7-69xx/68xx\n\n- Add a new style supplements for the recent kernels. (bsc#1096141)\n","status":"published","published":"2018-07-12T06:50:05Z","modified":"2026-02-04T04:09:19.764927Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1935-2","title":"Recommended update for ucode-intel","description":"\n\nThe Intel CPU microcode bundle was updated to the 20180703 release.\n\nFor the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a)\nand helps mitigating CVE-2018-3639 (Spectre v4)  (bsc#1100147 bsc#1087082 bsc#1087083).\n\nMore information on:\n  https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File\n\nFollowing chipsets are fixed in this round:\n\nModel        Stepping F-MO-S/PI      Old-\u003eNew\n\n---- updated platforms ------------------------------------\n\nSNB-EP       C1       6-2d-6/6d 0000061c-\u003e0000061d Xeon E5\nSNB-EP       C2       6-2d-7/6d 00000713-\u003e00000714 Xeon E5\nIVT          C0       6-3e-4/ed 0000042c-\u003e0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K\nIVT          D1       6-3e-7/ed 00000713-\u003e00000714 Xeon E5 v2\nHSX-E/EP/4S  C0       6-3f-2/6f 0000003c-\u003e0000003d Xeon E5 v3\nHSX-EX       E0       6-3f-4/80 00000011-\u003e00000012 Xeon E7 v3\nSKX-SP/D/W/X H0       6-55-4/b7 02000043-\u003e0200004d Xeon Bronze 31xx, Silver 41xx, Gold 51xx/61xx Platinum 81xx, D/W-21xx; Core i9-7xxxX\nBDX-DE       A1       6-56-5/10 0e000009-\u003e0e00000a Xeon D-15x3N\nBDX-ML       B/M/R0   6-4f-1/ef 0b00002c-\u003e0b00002e Xeon E5/E7 v4; Core i7-69xx/68xx\n\n- Add a new style supplements for the recent kernels. (bsc#1096141)\n","status":"published","published":"2018-10-18T12:46:53Z","modified":"2026-02-04T04:09:25.103113Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2076-1","title":"Security update for microcode_ctl","description":"\n  \nThis update for microcode_ctl fixes the following issues:\n\nThe Intel CPU Microcode bundle was updated to the 20180703 release\n\nFor the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and\nhelps mitigating CVE-2018-3639 (Spectre v4)  (bsc#1100147 bsc#1087082 bsc#1087083)\n\nMore details can be found on:\n\n  https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File\n\nFollowing chipsets are fixed in this round:\n\nModel        Stepping F-MO-S/PI      Old-\u003eNew\n---- updated platforms ------------------------------------\nSNB-EP       C1       6-2d-6/6d 0000061c-\u003e0000061d Xeon E5\nSNB-EP       C2       6-2d-7/6d 00000713-\u003e00000714 Xeon E5\nIVT          C0       6-3e-4/ed 0000042c-\u003e0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K\nIVT          D1       6-3e-7/ed 00000713-\u003e00000714 Xeon E5 v2\nHSX-E/EP/4S  C0       6-3f-2/6f 0000003c-\u003e0000003d Xeon E5 v3\nHSX-EX       E0       6-3f-4/80 00000011-\u003e00000012 Xeon E7 v3\nSKX-SP/D/W/X H0       6-55-4/b7 02000043-\u003e0200004d Xeon Bronze 31xx, Silver 41xx, Gold 51xx/61xx Platinum 81xx, D/W-21xx; Core i9-7xxxX\nBDX-DE       A1       6-56-5/10 0e000009-\u003e0e00000a Xeon D-15x3N\nBDX-ML       B/M/R0   6-4f-1/ef 0b00002c-\u003e0b00002e Xeon E5/E7 v4; Core i7-69xx/68xx\n","status":"published","published":"2018-07-26T14:39:31Z","modified":"2026-02-04T02:53:26.934755Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2331-1","title":"Security update to ucode-intel","description":"\nucode-intel was updated to the 20180807 release.\n\nFor the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and is\npart of the mitigations for CVE-2018-3639 (Spectre v4) and CVE-2018-3646\n(L1 Terminal fault).\n(bsc#1104134 bsc#1087082 bsc#1087083 bsc#1089343)\n\n Processor             Identifier     Version       Products\n\n Model        Stepping F-MO-S/PI      Old-\u003eNew\n\n ---- new platforms ----------------------------------------\n WSM-EP/WS    U1       6-2c-2/03           0000001f Xeon E/L/X56xx, W36xx\n NHM-EX       D0       6-2e-6/04           0000000d Xeon E/L/X65xx/75xx\n BXT          C0       6-5c-2/01           00000014 Atom T5500/5700\n APL          E0       6-5c-a/03           0000000c Atom x5-E39xx\n DVN          B0       6-5f-1/01           00000024 Atom C3xxx\n ---- updated platforms ------------------------------------\n NHM-EP/WS    D0       6-1a-5/03 00000019-\u003e0000001d Xeon E/L/X/W55xx\n NHM          B1       6-1e-5/13 00000007-\u003e0000000a Core i7-8xx, i5-7xx; Xeon L3426, X24xx\n WSM          B1       6-25-2/12 0000000e-\u003e00000011 Core i7-6xx, i5-6xx/4xxM, i3-5xx/3xxM, Pentium G69xx, Celeon P45xx; Xeon L3406\n WSM          K0       6-25-5/92 00000004-\u003e00000007 Core i7-6xx, i5-6xx/5xx/4xx, i3-5xx/3xx, Pentium G69xx/P6xxx/U5xxx, Celeron P4xxx/U3xxx\n SNB          D2       6-2a-7/12 0000002d-\u003e0000002e Core Gen2; Xeon E3\n WSM-EX       A2       6-2f-2/05 00000037-\u003e0000003b Xeon E7\n IVB          E2       6-3a-9/12 0000001f-\u003e00000020 Core Gen3 Mobile\n HSW-H/S/E3   Cx/Dx    6-3c-3/32 00000024-\u003e00000025 Core Gen4 Desktop; Xeon E3 v3\n BDW-U/Y      E/F      6-3d-4/c0 0000002a-\u003e0000002b Core Gen5 Mobile\n HSW-ULT      Cx/Dx    6-45-1/72 00000023-\u003e00000024 Core Gen4 Mobile and derived Pentium/Celeron\n HSW-H        Cx       6-46-1/32 00000019-\u003e0000001a Core Extreme i7-5xxxX\n BDW-H/E3     E/G      6-47-1/22 0000001d-\u003e0000001e Core i5-5xxxR/C, i7-5xxxHQ/EQ; Xeon E3 v4\n SKL-U/Y      D0       6-4e-3/c0 000000c2-\u003e000000c6 Core Gen6 Mobile\n BDX-DE       V1       6-56-2/10 00000015-\u003e00000017 Xeon D-1520/40\n BDX-DE       V2/3     6-56-3/10 07000012-\u003e07000013 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19\n BDX-DE       Y0       6-56-4/10 0f000011-\u003e0f000012 Xeon D-1557/59/67/71/77/81/87\n APL          D0       6-5c-9/03 0000002c-\u003e00000032 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx\n SKL-H/S/E3   R0       6-5e-3/36 000000c2-\u003e000000c6 Core Gen6; Xeon E3 v5\n","status":"published","published":"2018-08-15T11:50:29Z","modified":"2026-02-04T03:20:35.009377Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2331-2","title":"Security update to ucode-intel","description":"\nucode-intel was updated to the 20180807 release.\n\nFor the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and is\npart of the mitigations for CVE-2018-3639 (Spectre v4) and CVE-2018-3646\n(L1 Terminal fault).\n(bsc#1104134 bsc#1087082 bsc#1087083 bsc#1089343)\n\n Processor             Identifier     Version       Products\n\n Model        Stepping F-MO-S/PI      Old-\u003eNew\n\n ---- new platforms ----------------------------------------\n WSM-EP/WS    U1       6-2c-2/03           0000001f Xeon E/L/X56xx, W36xx\n NHM-EX       D0       6-2e-6/04           0000000d Xeon E/L/X65xx/75xx\n BXT          C0       6-5c-2/01           00000014 Atom T5500/5700\n APL          E0       6-5c-a/03           0000000c Atom x5-E39xx\n DVN          B0       6-5f-1/01           00000024 Atom C3xxx\n ---- updated platforms ------------------------------------\n NHM-EP/WS    D0       6-1a-5/03 00000019-\u003e0000001d Xeon E/L/X/W55xx\n NHM          B1       6-1e-5/13 00000007-\u003e0000000a Core i7-8xx, i5-7xx; Xeon L3426, X24xx\n WSM          B1       6-25-2/12 0000000e-\u003e00000011 Core i7-6xx, i5-6xx/4xxM, i3-5xx/3xxM, Pentium G69xx, Celeon P45xx; Xeon L3406\n WSM          K0       6-25-5/92 00000004-\u003e00000007 Core i7-6xx, i5-6xx/5xx/4xx, i3-5xx/3xx, Pentium G69xx/P6xxx/U5xxx, Celeron P4xxx/U3xxx\n SNB          D2       6-2a-7/12 0000002d-\u003e0000002e Core Gen2; Xeon E3\n WSM-EX       A2       6-2f-2/05 00000037-\u003e0000003b Xeon E7\n IVB          E2       6-3a-9/12 0000001f-\u003e00000020 Core Gen3 Mobile\n HSW-H/S/E3   Cx/Dx    6-3c-3/32 00000024-\u003e00000025 Core Gen4 Desktop; Xeon E3 v3\n BDW-U/Y      E/F      6-3d-4/c0 0000002a-\u003e0000002b Core Gen5 Mobile\n HSW-ULT      Cx/Dx    6-45-1/72 00000023-\u003e00000024 Core Gen4 Mobile and derived Pentium/Celeron\n HSW-H        Cx       6-46-1/32 00000019-\u003e0000001a Core Extreme i7-5xxxX\n BDW-H/E3     E/G      6-47-1/22 0000001d-\u003e0000001e Core i5-5xxxR/C, i7-5xxxHQ/EQ; Xeon E3 v4\n SKL-U/Y      D0       6-4e-3/c0 000000c2-\u003e000000c6 Core Gen6 Mobile\n BDX-DE       V1       6-56-2/10 00000015-\u003e00000017 Xeon D-1520/40\n BDX-DE       V2/3     6-56-3/10 07000012-\u003e07000013 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19\n BDX-DE       Y0       6-56-4/10 0f000011-\u003e0f000012 Xeon D-1557/59/67/71/77/81/87\n APL          D0       6-5c-9/03 0000002c-\u003e00000032 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx\n SKL-H/S/E3   R0       6-5e-3/36 000000c2-\u003e000000c6 Core Gen6; Xeon E3 v5\n","status":"published","published":"2018-10-18T12:49:10Z","modified":"2026-02-04T03:11:32.109114Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2335-1","title":"Security update to ucode-intel","description":"\nucode-intel was updated to the 20180807 release.\n\nFor the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a), and is part of the \nmitigations for CVE-2018-3639 (Spectre v4) and CVE-2018-3646 (L1 Terminal Fault).\n(bsc#1104134 bsc#1087082 bsc#1087083 bsc#1089343)\n\n Processor             Identifier     Version       Products\n\n Model        Stepping F-MO-S/PI      Old-\u003eNew\n\n ---- new platforms ----------------------------------------\n WSM-EP/WS    U1       6-2c-2/03           0000001f Xeon E/L/X56xx, W36xx\n NHM-EX       D0       6-2e-6/04           0000000d Xeon E/L/X65xx/75xx\n BXT          C0       6-5c-2/01           00000014 Atom T5500/5700\n APL          E0       6-5c-a/03           0000000c Atom x5-E39xx\n DVN          B0       6-5f-1/01           00000024 Atom C3xxx\n ---- updated platforms ------------------------------------\n NHM-EP/WS    D0       6-1a-5/03 00000019-\u003e0000001d Xeon E/L/X/W55xx\n NHM          B1       6-1e-5/13 00000007-\u003e0000000a Core i7-8xx, i5-7xx; Xeon L3426, X24xx\n WSM          B1       6-25-2/12 0000000e-\u003e00000011 Core i7-6xx, i5-6xx/4xxM, i3-5xx/3xxM, Pentium G69xx, Celeon P45xx; Xeon L3406\n WSM          K0       6-25-5/92 00000004-\u003e00000007 Core i7-6xx, i5-6xx/5xx/4xx, i3-5xx/3xx, Pentium G69xx/P6xxx/U5xxx, Celeron P4xxx/U3xxx\n SNB          D2       6-2a-7/12 0000002d-\u003e0000002e Core Gen2; Xeon E3\n WSM-EX       A2       6-2f-2/05 00000037-\u003e0000003b Xeon E7\n IVB          E2       6-3a-9/12 0000001f-\u003e00000020 Core Gen3 Mobile\n HSW-H/S/E3   Cx/Dx    6-3c-3/32 00000024-\u003e00000025 Core Gen4 Desktop; Xeon E3 v3\n BDW-U/Y      E/F      6-3d-4/c0 0000002a-\u003e0000002b Core Gen5 Mobile\n HSW-ULT      Cx/Dx    6-45-1/72 00000023-\u003e00000024 Core Gen4 Mobile and derived Pentium/Celeron\n HSW-H        Cx       6-46-1/32 00000019-\u003e0000001a Core Extreme i7-5xxxX\n BDW-H/E3     E/G      6-47-1/22 0000001d-\u003e0000001e Core i5-5xxxR/C, i7-5xxxHQ/EQ; Xeon E3 v4\n SKL-U/Y      D0       6-4e-3/c0 000000c2-\u003e000000c6 Core Gen6 Mobile\n BDX-DE       V1       6-56-2/10 00000015-\u003e00000017 Xeon D-1520/40\n BDX-DE       V2/3     6-56-3/10 07000012-\u003e07000013 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19\n BDX-DE       Y0       6-56-4/10 0f000011-\u003e0f000012 Xeon D-1557/59/67/71/77/81/87\n APL          D0       6-5c-9/03 0000002c-\u003e00000032 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx\n SKL-H/S/E3   R0       6-5e-3/36 000000c2-\u003e000000c6 Core Gen6; Xeon E3 v5\n","status":"published","published":"2018-08-15T14:01:48Z","modified":"2026-02-04T02:51:09.396117Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2338-1","title":"Security update to ucode-intel","description":"\nucode-intel was updated to the 20180807 release.\n\nFor the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and is\npart of the mitigations for CVE-2018-3639 (Spectre v4) and CVE-2018-3646\n(L1 Terminal fault).\n(bsc#1104134 bsc#1087082 bsc#1087083 bsc#1089343)\n\n Processor             Identifier     Version       Products\n\n Model        Stepping F-MO-S/PI      Old-\u003eNew\n\n ---- new platforms ----------------------------------------\n WSM-EP/WS    U1       6-2c-2/03           0000001f Xeon E/L/X56xx, W36xx\n NHM-EX       D0       6-2e-6/04           0000000d Xeon E/L/X65xx/75xx\n BXT          C0       6-5c-2/01           00000014 Atom T5500/5700\n APL          E0       6-5c-a/03           0000000c Atom x5-E39xx\n DVN          B0       6-5f-1/01           00000024 Atom C3xxx\n ---- updated platforms ------------------------------------\n NHM-EP/WS    D0       6-1a-5/03 00000019-\u003e0000001d Xeon E/L/X/W55xx\n NHM          B1       6-1e-5/13 00000007-\u003e0000000a Core i7-8xx, i5-7xx; Xeon L3426, X24xx\n WSM          B1       6-25-2/12 0000000e-\u003e00000011 Core i7-6xx, i5-6xx/4xxM, i3-5xx/3xxM, Pentium G69xx, Celeon P45xx; Xeon L3406\n WSM          K0       6-25-5/92 00000004-\u003e00000007 Core i7-6xx, i5-6xx/5xx/4xx, i3-5xx/3xx, Pentium G69xx/P6xxx/U5xxx, Celeron P4xxx/U3xxx\n SNB          D2       6-2a-7/12 0000002d-\u003e0000002e Core Gen2; Xeon E3\n WSM-EX       A2       6-2f-2/05 00000037-\u003e0000003b Xeon E7\n IVB          E2       6-3a-9/12 0000001f-\u003e00000020 Core Gen3 Mobile\n HSW-H/S/E3   Cx/Dx    6-3c-3/32 00000024-\u003e00000025 Core Gen4 Desktop; Xeon E3 v3\n BDW-U/Y      E/F      6-3d-4/c0 0000002a-\u003e0000002b Core Gen5 Mobile\n HSW-ULT      Cx/Dx    6-45-1/72 00000023-\u003e00000024 Core Gen4 Mobile and derived Pentium/Celeron\n HSW-H        Cx       6-46-1/32 00000019-\u003e0000001a Core Extreme i7-5xxxX\n BDW-H/E3     E/G      6-47-1/22 0000001d-\u003e0000001e Core i5-5xxxR/C, i7-5xxxHQ/EQ; Xeon E3 v4\n SKL-U/Y      D0       6-4e-3/c0 000000c2-\u003e000000c6 Core Gen6 Mobile\n BDX-DE       V1       6-56-2/10 00000015-\u003e00000017 Xeon D-1520/40\n BDX-DE       V2/3     6-56-3/10 07000012-\u003e07000013 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19\n BDX-DE       Y0       6-56-4/10 0f000011-\u003e0f000012 Xeon D-1557/59/67/71/77/81/87\n APL          D0       6-5c-9/03 0000002c-\u003e00000032 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx\n SKL-H/S/E3   R0       6-5e-3/36 000000c2-\u003e000000c6 Core Gen6; Xeon E3 v5\n","status":"published","published":"2018-08-15T15:31:46Z","modified":"2026-02-04T04:40:03.512575Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"USN-3756-1","title":"intel-microcode vulnerabilities","description":"It was discovered that memory present in the L1 data cache of an Intel CPU\ncore may be exposed to a malicious process that is executing on the CPU\ncore. This vulnerability is also known as L1 Terminal Fault (L1TF). A local\nattacker in a guest virtual machine could use this to expose sensitive\ninformation (memory from other guests or the host OS). (CVE-2018-3646)\n\nJann Horn and Ken Johnson discovered that microprocessors utilizing\nspeculative execution of a memory read may allow unauthorized memory reads\nvia a sidechannel attack. This flaw is known as Spectre Variant 4. A local\nattacker could use this to expose sensitive information, including kernel\nmemory. (CVE-2018-3639)\n\nZdenek Sojka, Rudolf Marek, Alex Zuepke, and Innokentiy Sennovskiy\ndiscovered that microprocessors that perform speculative reads of\nsystem registers may allow unauthorized disclosure of system parameters\nvia a sidechannel attack. This vulnerability is also known as Rogue\nSystem Register Read (RSRE). An attacker could use this to expose\nsensitive information. (CVE-2018-3640)\n","status":"published","published":"2018-08-27T18:48:59Z","modified":"2026-06-03T14:03:44.032430845Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}