CVE-2018-3620: intel corporation multiple Observable Discrepancy
Modified
AliasesALPINE-CVE-2018-3620UBUNTU-CVE-2018-3620DEBIAN-CVE-2018-3620
Published 14-08-2018Last modified 29-05-2026
Vulnerability summary
CVE-2018-3620 is a medium (CVSS 5.6) Observable Discrepancy vulnerability in intel corporation multiple. EPSS estimates a 5.58% chance of exploitation in the next 30 days, higher than 92.8% of scored vulnerabilities.
Priority
Routine
Not severe (CVSS 5.6, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?CVSS score
5.6/10
010
Medium · v3.1 (CVE.org)EPSS score
5.58%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 43 · Related 19DLA-1481-1DLA-1529-1DSA-4274-1DSA-4279-1MGASA-2018-0344MGASA-2018-0345MGASA-2018-0346MGASA-2018-0347OPENSUSE-SU-2026:11242-1RHSA-2018:2384RHSA-2018:2387RHSA-2018:2388RHSA-2018:2389RHSA-2018:2390RHSA-2018:2391RHSA-2018:2392RHSA-2018:2393RHSA-2018:2394RHSA-2018:2395RHSA-2018:2396RHSA-2018:2402RHSA-2018:2403RHSA-2018:2404RHSA-2018:2602RHSA-2018:2603SUSE-SU-2018:2328-1SUSE-SU-2018:2332-1SUSE-SU-2018:2344-1SUSE-SU-2018:2344-2SUSE-SU-2018:2362-1SUSE-SU-2018:2366-1SUSE-SU-2018:2374-1SUSE-SU-2018:2380-1SUSE-SU-2018:2381-1SUSE-SU-2018:2384-1SUSE-SU-2018:2450-1SUSE-SU-2018:2596-1SUSE-SU-2018:2637-1USN-3740-1USN-3740-2USN-3741-1USN-3741-2USN-3742-1
Timeline
- 14-08-2018PublishedVulnerability first disclosed.
- 29-05-2026Last modifiedVulnerability information updated.
Description
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.
CVSS metrics
8 scores · 5 sources · 3 versionsMedium 5.6Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NSourcesAll 3 agree
- NVDNIST5.6MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
- OSV · UbuntuEcosystem advisory · calculated5.6MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Medium 5.6Preferred score · NVD (NIST)
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NSourcesAll 4 agree
- OSV · AlpineEcosystem advisory · calculated5.6MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
- OSV · UbuntuEcosystem advisory · calculated5.6MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated5.6MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Medium 4.7Preferred score · NVD (NIST)
AV:L/AC:M/Au:N/C:C/I:N/A:NSourcesSingle source
EPSS trend
Probability
5.58%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
No change 0.00 pp
From 5.58% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Version check
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu16 products
- linux< 3.13.0-155.205 | < 4.4.0-133.159 | < 4.15.0-32.35
- linux-aws< 4.4.0-1027.30 | < 4.4.0-1065.75 | < 4.15.0-1019.19
- linux-azure< 4.15.0-1021.21~16.04.1 | < 4.15.0-1021.21
- linux-azure-fdeAll versions (No fix recorded)
- linux-fips< 4.4.0-1008.10
Intel7 products
- core_i3_firmware330e | 330m | 330um | 350m | 370m | 380m | 380um | 390m | 530 | 540 | 550 | 560 | 2100 | 2100t | 2102 | 2105 | 2115c | 2120 | 2120t | 2125 | 2130 | 2310e | 2310m | 2312m | 2328m | 2330e | 2330m | 2340ue | 2348m | 2350m | 2357m | 2365m | 2367m | 2370m | 2375m | 2377m | 3110m | 3115c | 3120m | 3120me | 3130m | 3210 | 3217u | 3217ue | 3220 | 3220t | 3225 | 3227u | 3229y | 3240 | 3240t | 3245 | 3250 | 3250t | 4000m | 4005u | 4010u | 4010y | 4012y | 4020y | 4025u | 4030u | 4030y | 4100e | 4100m | 4100u | 4102e | 4110e | 4110m | 4112e | 4120u | 4130 | 4130t | 4150 | 4150t | 4158u | 4160 | 4160t | 4170 | 4170t | 4330 | 4330t | 4330te | 4340 | 4340te | 4350 | 4350t | 4360 | 4360t | 4370 | 4370t | 5005u | 5010u | 5015u | 5020u | 5157u | 6006u | 6098p | 6100 | 6100e | 6100h | 6100t | 6100te | 6100u | 6102e | 6157u | 6167u | 6300 | 6300t | 6320 | 8100 | 8350k
- core_i5_firmware430m | 430um | 450m | 460m | 470um | 480m | 520e | 520m | 520um | 540m | 540um | 560m | 560um | 580m | 650 | 655k | 660 | 661 | 670 | 680 | 750 | 750s | 760 | 2300 | 2310 | 2320 | 2380p | 2390t | 2400 | 2400s | 2405s | 2410m | 2430m | 2435m | 2450m | 2450p | 2467m | 2500 | 2500k | 2500s | 2500t | 2510e | 2515e | 2520m | 2537m | 2540m | 2550k | 2557m | 3210m | 3230m | 3317u | 3320m | 3330 | 3330s | 3337u | 3339y | 3340 | 3340m | 3340s | 3350p | 3360m | 3380m | 3427u | 3437u | 3439y | 3450 | 3450s | 3470 | 3470s | 3470t | 3475s | 3550 | 3550s | 3570 | 3570k | 3570s | 3570t | 3610me | 4200h | 4200m | 4200u | 4200y | 4202y | 4210h | 4210m | 4210u | 4210y | 4220y | 4250u | 4258u | 4260u | 4278u | 4288u | 4300m | 4300u | 4300y | 4302y | 4308u | 4310m | 4310u | 4330m | 4340m | 4350u | 4360u | 4400e | 4402e | 4402ec | 4410e | 4422e | 4430 | 4430s | 4440 | 4440s | 4460 | 4460s | 4460t | 4570 | 4570r | 4570s | 4570t | 4570te | 4590 | 4590s | 4590t | 4670 | 4670k | 4670r | 4670s | 4670t | 4690 | 4690k | 4690s | 4690t | 5200u | 5250u | 5257u | 5287u | 5300u | 5350h | 5350u | 5575r | 5675c | 5675r | 6200u | 6260u | 6267u | 6287u | 6300hq | 6300u | 6350hq | 6360u | 6400 | 6400t | 6402p | 6440eq | 6440hq | 6442eq | 6500 | 6500t | 6500te | 6585r | 6600 | 6600k | 6600t | 6685r | 8250u | 8350u | 8400 | 8600k
- core_i7_firmware7y75 | 610e | 620le | 620lm | 620m | 620ue | 620um | 640lm | 640m | 640um | 660lm | 660ue | 660um | 680um | 720qm | 740qm | 820qm | 840qm | 860 | 860s | 870 | 870s | 875k | 880 | 920 | 920xm | 930 | 940 | 940xm | 950 | 960 | 965 | 970 | 975 | 980 | 980x | 990x | 2600 | 2600k | 2600s | 2610ue | 2617m | 2620m | 2629m | 2630qm | 2635qm | 2637m | 2640m | 2649m | 2655le | 2657m | 2670qm | 2675qm | 2677m | 2700k | 2710qe | 2715qe | 2720qm | 2760qm | 2820qm | 2860qm | 2920xm | 2960xm | 3517u | 3517ue | 3520m | 3537u | 3540m | 3555le | 3610qe | 3610qm | 3612qe | 3612qm | 3615qe | 3615qm | 3630qm | 3632qm | 3635qm | 3667u | 3687u | 3689y | 3720qm | 3740qm | 3770 | 3770k | 3770s | 3770t | 3820qm | 3840qm | 4500u | 4510u | 4550u | 4558u | 4578u | 4600m | 4600u | 4610m | 4610y | 4650u | 4700ec | 4700eq | 4700hq | 4700mq | 4702ec | 4702hq | 4702mq | 4710hq | 4710mq | 4712hq | 4712mq | 4720hq | 4722hq | 4750hq | 4760hq | 4765t | 4770 | 4770hq | 4770k | 4770r | 4770s | 4770t | 4770te | 4771 | 4785t | 4790 | 4790k | 4790s | 4790t | 4800mq | 4810mq | 4850hq | 4860hq | 4870hq | 4900mq | 4910mq | 4950hq | 4960hq | 4980hq | 5500u | 5550u | 5557u | 5600u | 5650u | 5700eq | 5700hq | 5750hq | 5775c | 5775r | 5850eq | 5850hq | 5950hq | 7500u | 7560u | 7567u | 7600u | 7660u | 7700 | 7700hq | 7700k | 7700t | 7820eq | 7820hk | 7820hq | 7920hq | 8550u | 8650u | 8700 | 8700k
- core_m5y10 | 5y10a | 5y10c | 5y31 | 5y51 | 5y70 | 5y71
- core_m36y30 | 7y30 | 7y32
Debian3 products
- intel-microcode< 3.20180703.1
- linux< 4.17.15-1
- xen< 4.11.1~pre.20180911.5acdd26fdc+dfsg-2
Alpine1 product
- xen< 4.11.1-r0 | < 4.8.5-r0 | < 4.9.3-r0
Intel corporation1 product
- multipleMultiple
5 vendors · 28 products
References
65 linksShow all 65 references
- security.freebsd.org/advisories/FreeBSD-SA-18:09.l1tf.ascVendor AdvisoryX Refsource FREEBSDThird Party Advisory
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannelVendor AdvisoryX Refsource CISCOThird Party Advisory
- www.oracle.com/security-alerts/cpujul2020.htmlX Refsource MISC
- help.ecostruxureit.com/display/…X Refsource CONFIRM
portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018X Refsource CONFIRM- www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-enX Refsource CONFIRMThird Party Advisory
- www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.htmlX Refsource CONFIRMVendor Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-254686.pdfX Refsource CONFIRM
- support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_usX Refsource CONFIRMThird Party Advisory
- software.intel.com/security-software-guidance/software-guidance/l1-terminal-faultX Refsource CONFIRMMitigationVendor Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-608355.pdfX Refsource CONFIRM