CVE-2018-12126

Description

Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

How to fix CVE-2018-12126

To remediate CVE-2018-12126, upgrade the affected package to a fixed version below.

—upgrade to 20190514a-r0 or later
—upgrade to 4.12.0-r2 or later
—upgrade to 3.20190514.1~deb8u1 or later
—upgrade to 3.20190514.1 or later
—upgrade to 3.20190618.1~deb8u1 or later
—upgrade to 3.20190514.1~deb9u1 or later
—upgrade to 4.9.168-1+deb9u2 or later
—upgrade to 3.16.68-1 or later
—upgrade to 4.19.37-2 or later
—upgrade to 4.9.168-1+deb9u2~deb8u1 or later
—upgrade to 4.11.1+92-g6c33308a8d-1 or later

Is CVE-2018-12126 being exploited?

Low — EPSS is 0.5%, meaning exploitation activity has not been observed at scale.

Affected packages (11)

from 0, < 20190514a-r0
from 0, < 4.12.0-r2
from 0, < 3.20190514.1~deb8u1
from 0, < 3.20190514.1
from 0, < 3.20190618.1~deb8u1
from 0, < 3.20190514.1~deb9u1
from 0, < 4.9.168-1+deb9u2
from 0, < 3.16.68-1
from 0, < 4.19.37-2
from 0, < 4.9.168-1+deb9u2~deb8u1
from 0, < 4.11.1+92-g6c33308a8d-1

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM5.6	CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N