CVE-2018-3665

Severity: medium (CVSS 5.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-21 · updated 2026-06-17
Weakness: CWE-200

Description

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.

Affected products

Canonical Ubuntu Linux: 12.04, 14.04, 16.04 (and their updates)
Citrix XenServer: 7.0, 7.1, 7.3, 7.4, 7.5 (and their updates)
Debian Linux: 8.0, 9.0 (and their updates)
FreeBSD: 11.0, 11.1, 11.2 (and their updates)
Intel Core I3: 330e, 330m, 330um, 350m, 370m, 380m (+106) (and their updates)
Intel Core I5: 430m, 430um, 450m, 460m, 470um, 480m (+163) (and their updates)
Intel Core I7: 7y75, 610e, 620le, 620lm, 620m, 620ue (+162) (and their updates)
Intel Core M: 5y10, 5y10a, 5y10c, 5y31, 5y51, 5y70 (+1) (and their updates)
Intel Core M3: 6y30, 7y30, 7y32 (and their updates)
Intel Core M5: 6y54, 6y57 (and their updates)
Intel Core M7: 6y75 (and their updates)
Red Hat Enterprise Linux: 6.0, 7.0 (and their updates)
RedHat Enterprise Linux Desktop: 6.0, 7.0 (and their updates)
RedHat Enterprise Linux Workstation: 6.0, 7.0 (and their updates)
Intel Corporation Intel Core-based microprocessors: all versions

References

Get alerted when CVE-2018-3665 or the next vulnerability affects your stack