CVE-2018-3665 json
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local p…
published 2018-06-21 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-15519
- cvss
- 5.6
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.6%
- EPSS 0.6% chance of exploitation in 30 days, percentile 50%
- public exploits
- 0
- none known
Summary
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.
Patch / fix
- xen Debian 14, Debian 13, Debian 12 4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8
- linux Debian 14, Debian 13, Debian 12 4.6.1-1
debian advisories DEBIAN-CVE-2018-3665
- linux Ubuntu 14.04 LTS 3.13.0-153.203
- linux Ubuntu 16.04 LTS 4.4.0-130.156
- linux-aws Ubuntu 14.04 LTS 4.4.0-1024.25
- linux-aws Ubuntu 16.04 LTS 4.4.0-1062.71
- linux-kvm Ubuntu 16.04 LTS 4.4.0-1029.34
- linux-lts-xenial Ubuntu 14.04 LTS 4.4.0-130.156~14.04.1
- linux-fips Ubuntu Pro FIPS-updates 16.04 LTS 4.4.0-1008.10
ubuntu advisories UBUNTU-CVE-2018-3665
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- kernel RHEL 6 2.6.32-754.2.1.el6
- perf RHEL 6 2.6.32-754.2.1.el6
- python-perf RHEL 6 2.6.32-754.2.1.el6
- kernel-kdump RHEL 6 2.6.32-754.2.1.el6
- kernel-firmware RHEL 6 2.6.32-754.2.1.el6
- kernel-bootwrapper RHEL 6 2.6.32-754.2.1.el6
- kernel-abi-whitelists RHEL 6 2.6.32-754.2.1.el6
- kernel-debuginfo-common-i686 RHEL 6 2.6.32-754.2.1.el6
red hat advisories RHSA-2018:2164RHSA-2019:1190RHSA-2019:1170RHSA-2018:2165RHSA-2018:1852RHSA-2018:1944
- xen SLES 12 SP2-BCL 4.7.6_02-43.36.1
- kernel-syms SLES 12 SP2-BCL 4.4.121-92.85.1
- kernel-source SLES 12 SP2-BCL 4.4.121-92.85.1
- kernel-default SLES 12 SP2-BCL 4.4.121-92.85.1
- kgraft-patch-SLE12-SP2_Update_23 SLES 12 SP2-BCL 1-3.5.1
- xen SLES 11 SP3-LTSS, SLE Point of Sale 11 SP3 4.2.5_21-45.25.1
- kgraft-patch-SLE12-SP3_Update_12 SLE Live Patching 12 SP3 2-2.5
- kgraft-patch-SLE12-SP3_Update_4 SLE Live Patching 12 SP3 8-2.5
suse advisories SUSE-SU-2018:2081-2SUSE-SU-2018:1855-2SUSE-SU-2018:2528-1SUSE-SU-2018:2267-1SUSE-SU-2018:2270-1SUSE-SU-2018:2268-1
- xen openSUSE Tumbleweed 4.15.1_01-1.2
opensuse advisories openSUSE-SU-2024:11520-1
- xen Alpine 3.24, Alpine 3.23, Alpine 3.22 +13 more 4.11.0-r0
- xen Alpine 3.5 4.7.6-r0
- xen Alpine 3.6 4.8.4-r0
- xen Alpine 3.7 4.9.2-r3
- xen Alpine 3.8 4.10.1-r3
alpine advisories ALPINE-CVE-2018-3665
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2018-3665 updated cvss 5.6
Kernel: FPU state information leakage via lazy FPU restore
-
Red Hat Enterprise Linux 5 kernelaffected: workaround, no fix planned “Out of support scope”
-
Red Hat Enterprise Linux Client (v. 7) perf 3.10.0-862.3.3.el7, kernel 3.10.0-862.3.3.el7, python-perf 3.10.0-862.3.3.el7, kernel-tools 3.10.0-862.3.3.el7, kernel-tools-libs 3.10.0-862.3.3.el7, kernel-abi-whitelists 3.10.0-862.3.3.el7, +1 more Red Hat Enterprise Linux Client Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-862.3.3.el7 Red Hat Enterprise Linux ComputeNode (v. 7) perf 3.10.0-862.3.3.el7, kernel 3.10.0-862.3.3.el7, python-perf 3.10.0-862.3.3.el7, kernel-tools 3.10.0-862.3.3.el7, kernel-tools-libs 3.10.0-862.3.3.el7, kernel-abi-whitelists 3.10.0-862.3.3.el7, +1 morefixed: vendor fix RHSA-2018:1852
-
Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) perf 3.10.0-693.47.2.el7, kernel 3.10.0-693.47.2.el7, python-perf 3.10.0-693.47.2.el7, kernel-tools 3.10.0-693.47.2.el7, kernel-tools-libs 3.10.0-693.47.2.el7, kernel-abi-whitelists 3.10.0-693.47.2.el7, +1 morefixed: vendor fix RHSA-2019:1170
-
Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-862.3.3.el7fixed: vendor fix RHSA-2018:1852
-
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) kernel-debuginfo-common-x86_64 3.10.0-693.47.2.el7fixed: vendor fix RHSA-2019:1170
-
Red Hat Enterprise Linux Desktop (v. 6) perf 2.6.32-754.2.1.el6, kernel 2.6.32-754.2.1.el6, kernel-firmware 2.6.32-754.2.1.el6, kernel-abi-whitelists 2.6.32-754.2.1.el6, kernel-debuginfo-common-i686 2.6.32-754.2.1.el6, kernel-debuginfo-common-x86_64 2.6.32-754.2.1.el6 Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf 2.6.32-754.2.1.el6, kernel-debuginfo-common-i686 2.6.32-754.2.1.el6, kernel-debuginfo-common-x86_64 2.6.32-754.2.1.el6fixed: vendor fix RHSA-2018:2164
-
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) perf 3.10.0-862.3.3.el7, kernel 3.10.0-862.3.3.el7, python-perf 3.10.0-862.3.3.el7, kernel-kdump 3.10.0-862.3.3.el7, kernel-tools 3.10.0-862.3.3.el7, kernel-tools-libs 3.10.0-862.3.3.el7, +4 more Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debuginfo-common-ppc64le 3.10.0-862.3.3.el7fixed: vendor fix RHSA-2018:1852
-
Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt 3.10.0-862.3.3.rt56.809.el7, kernel-rt-kvm 3.10.0-862.3.3.rt56.809.el7, kernel-rt-trace 3.10.0-862.3.3.rt56.809.el7, kernel-rt-debug-kvm 3.10.0-862.3.3.rt56.809.el7, kernel-rt-trace-kvm 3.10.0-862.3.3.rt56.809.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-862.3.3.rt56.809.el7fixed: vendor fix RHSA-2018:1944
show 14 moreshow fewer
-
Red Hat Enterprise Linux HPC Node (v. 6) perf 2.6.32-754.2.1.el6, kernel 2.6.32-754.2.1.el6, kernel-firmware 2.6.32-754.2.1.el6, kernel-abi-whitelists 2.6.32-754.2.1.el6, kernel-debuginfo-common-i686 2.6.32-754.2.1.el6, kernel-debuginfo-common-x86_64 2.6.32-754.2.1.el6 Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf 2.6.32-754.2.1.el6, kernel-debuginfo-common-x86_64 2.6.32-754.2.1.el6fixed: vendor fix RHSA-2018:2164
-
Red Hat Enterprise Linux Realtime (v. 7) kernel-rt 3.10.0-862.3.3.rt56.809.el7, kernel-rt-trace 3.10.0-862.3.3.rt56.809.el7fixed: vendor fix RHSA-2018:1944
-
Red Hat Enterprise Linux Server (v. 6) perf 2.6.32-754.2.1.el6, kernel 2.6.32-754.2.1.el6, kernel-kdump 2.6.32-754.2.1.el6, kernel-firmware 2.6.32-754.2.1.el6, kernel-bootwrapper 2.6.32-754.2.1.el6, kernel-abi-whitelists 2.6.32-754.2.1.el6, +4 morefixed: vendor fix RHSA-2018:2164
-
Red Hat Enterprise Linux Server (v. 7) perf 3.10.0-862.3.3.el7, kernel 3.10.0-862.3.3.el7, python-perf 3.10.0-862.3.3.el7, kernel-kdump 3.10.0-862.3.3.el7, kernel-tools 3.10.0-862.3.3.el7, kernel-tools-libs 3.10.0-862.3.3.el7, +6 morefixed: vendor fix RHSA-2018:1852
-
Red Hat Enterprise Linux Server EUS (v. 7.4) perf 3.10.0-693.47.2.el7, kernel 3.10.0-693.47.2.el7, python-perf 3.10.0-693.47.2.el7, kernel-kdump 3.10.0-693.47.2.el7, kernel-tools 3.10.0-693.47.2.el7, kernel-tools-libs 3.10.0-693.47.2.el7, +6 morefixed: vendor fix RHSA-2019:1170
-
Red Hat Enterprise Linux Server Optional (v. 6) python-perf 2.6.32-754.2.1.el6, kernel-debuginfo-common-i686 2.6.32-754.2.1.el6, kernel-debuginfo-common-ppc64 2.6.32-754.2.1.el6, kernel-debuginfo-common-s390x 2.6.32-754.2.1.el6, kernel-debuginfo-common-x86_64 2.6.32-754.2.1.el6fixed: vendor fix RHSA-2018:2164
-
Red Hat Enterprise Linux Server Optional (v. 7) kernel-debuginfo-common-ppc64 3.10.0-862.3.3.el7, kernel-debuginfo-common-x86_64 3.10.0-862.3.3.el7, kernel-debuginfo-common-ppc64le 3.10.0-862.3.3.el7fixed: vendor fix RHSA-2018:1852
-
Red Hat Enterprise Linux Server Optional EUS (v. 7.4) kernel-debuginfo-common-ppc64 3.10.0-693.47.2.el7, kernel-debuginfo-common-x86_64 3.10.0-693.47.2.el7, kernel-debuginfo-common-ppc64le 3.10.0-693.47.2.el7fixed: vendor fix RHSA-2019:1170
-
Red Hat Enterprise Linux Workstation (v. 6) perf 2.6.32-754.2.1.el6, kernel 2.6.32-754.2.1.el6, kernel-firmware 2.6.32-754.2.1.el6, kernel-abi-whitelists 2.6.32-754.2.1.el6, kernel-debuginfo-common-i686 2.6.32-754.2.1.el6, kernel-debuginfo-common-x86_64 2.6.32-754.2.1.el6fixed: vendor fix RHSA-2018:2164
-
Red Hat Enterprise Linux Workstation (v. 7) perf 3.10.0-862.3.3.el7, kernel 3.10.0-862.3.3.el7, python-perf 3.10.0-862.3.3.el7, kernel-tools 3.10.0-862.3.3.el7, kernel-tools-libs 3.10.0-862.3.3.el7, kernel-abi-whitelists 3.10.0-862.3.3.el7, +1 morefixed: vendor fix RHSA-2018:1852
-
Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf 2.6.32-754.2.1.el6, kernel-debuginfo-common-i686 2.6.32-754.2.1.el6, kernel-debuginfo-common-x86_64 2.6.32-754.2.1.el6fixed: vendor fix RHSA-2018:2164
-
Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-862.3.3.el7fixed: vendor fix RHSA-2018:1852
-
Red Hat MRG Realtime for RHEL 6 Server v.2 kernel-rt 3.10.0-693.35.1.rt56.625.el6rt, kernel-rt 3.10.0-693.47.2.rt56.641.el6rt, kernel-rt-trace 3.10.0-693.35.1.rt56.625.el6rt, kernel-rt-trace 3.10.0-693.47.2.rt56.641.el6rt, kernel-rt-vanilla 3.10.0-693.35.1.rt56.625.el6rt, kernel-rt-vanilla 3.10.0-693.47.2.rt56.641.el6rt, +4 morefixed: vendor fix RHSA-2018:2165
-
Red Hat Enterprise Linux 7 perf, kernel, kernel-alt, python-perf, kernel-kdump, kernel-tools, +3 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-core, kernel-tools, python3-perf, +17 morenot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
0.63% chance of exploitation in the next 30 days, higher than 50% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 5.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N |
| NVD | 2.0 | 4.7 | AV:L/AC:M/Au:N/C:C/I:N/A:N |
Affected products
- Intel Corporation Intel Core-based microprocessors
Classification
- Weakness
-
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
-
access.redhat.com
/errata/RHSA-2018:2164
vendor-advisory, third-party-advisory
-
usn.ubuntu.com
/3696-1/
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2018:1944
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2018:1852
vendor-advisory, third-party-advisory
-
security.freebsd.org
/advisories/FreeBSD-SA-18:07.lazyfpu.asc
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2018:2165
vendor-advisory, third-party-advisory
-
debian.org
/security/2018/dsa-4232
vendor-advisory, third-party-advisory
-
usn.ubuntu.com
/3698-1/
vendor-advisory, third-party-advisory
-
usn.ubuntu.com
/3696-2/
vendor-advisory, third-party-advisory
-
usn.ubuntu.com
/3698-2/
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2019:1170
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2019:1190
vendor-advisory, third-party-advisory
-
intel.com
/content/www/us/en/security-center/advisory/intel-sa-00145.html
vendor-advisory
-
lists.debian.org
/debian-lts-announce/2018/07/msg00015.html
mailing-list, third-party-advisory
-
securitytracker.com
/id/1041125
vdb-entry, third-party-advisory
-
lists.debian.org
/debian-lts-announce/2018/07/msg00016.html
mailing-list, third-party-advisory
-
securitytracker.com
/id/1041124
vdb-entry, third-party-advisory
-
securityfocus.com
/bid/104460
vdb-entry, third-party-advisory
-
oracle.com
/security-alerts/cpujul2020.html
third-party-advisory
-
help.ecostruxureit.com
/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
third-party-advisory
-
nvidia.custhelp.com
/app/answers/detail/a_id/4787
third-party-advisory
-
synology.com
/support/security/Synology_SA_18_31
third-party-advisory
-
security.netapp.com
/advisory/ntap-20181016-0001/
third-party-advisory
-
support.citrix.com
/article/CTX235745
third-party-advisory
-
security.paloaltonetworks.com
/CVE-2018-3665
third-party-advisory
Sources
- CVE List CVE-2018-3665
- NVD CVE-2018-3665
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.