CVE-2018-15572: Medium severity Debian Debian Linux vulnerability
Last updated 4 July 2026
Other sources
The spectrev2selectmitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel before 4.18.1 does not always fill RSB upon a context switch, which makes it easier for attackers to conduct userspace-userspace spectreRSB attacks.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 4.18.1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-15572?
CVE-2018-15572 has a high severity rating due to its potential exploitation in userspace-userspace spectreRSB attacks.
How do I fix CVE-2018-15572?
To fix CVE-2018-15572, you should upgrade to Linux kernel version 4.18.1 or later.
Which Linux distributions are affected by CVE-2018-15572?
CVE-2018-15572 affects several versions of the Linux kernel including those used in Debian and Ubuntu distributions.
What is the impact of CVE-2018-15572?
The impact of CVE-2018-15572 allows attackers to exploit reduced protection against speculative execution vulnerabilities.
When was CVE-2018-15572 published?
CVE-2018-15572 was published on 24 July 2024.