CVE-2018-3646: intel corporation multiple
Modified
AliasesALPINE-CVE-2018-3646SUSE-SU-2018:2394-1SUSE-SU-2018:2401-1SUSE-SU-2018:2409-1SUSE-SU-2018:2410-1SUSE-SU-2018:2410-2SUSE-SU-2018:2426-1SUSE-SU-2018:2473-1SUSE-SU-2018:2480-1SUSE-SU-2018:2482-1SUSE-SU-2018:2483-1UBUNTU-CVE-2018-3646DEBIAN-CVE-2018-3646
Published 14-08-2018Last modified 29-05-2026
Vulnerability summary
CVE-2018-3646 is a medium (CVSS 5.6) vulnerability in intel corporation multiple. EPSS estimates a 8.10% chance of exploitation in the next 30 days, higher than 94.8% of scored vulnerabilities.
Priority
Routine
Not severe (CVSS 5.6, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?CVSS score
5.6/10
010
Medium · v3.1 (CVE.org)EPSS score
8.10%
0%100%
Low · -0.47 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 80 · Related 57DLA-1481-1DSA-4274-1DSA-4279-1MGASA-2018-0344MGASA-2018-0345MGASA-2018-0346MGASA-2018-0347OPENSUSE-SU-2024:11520-1RHSA-2018:2384RHSA-2018:2387RHSA-2018:2388RHSA-2018:2389RHSA-2018:2390RHSA-2018:2391RHSA-2018:2392RHSA-2018:2393RHSA-2018:2394RHSA-2018:2395RHSA-2018:2396RHSA-2018:2402RHSA-2018:2403RHSA-2018:2404RHSA-2018:2602RHSA-2018:2603SUSE-SU-2018:2328-1SUSE-SU-2018:2331-1SUSE-SU-2018:2331-2SUSE-SU-2018:2332-1SUSE-SU-2018:2335-1SUSE-SU-2018:2338-1SUSE-SU-2018:2341-1SUSE-SU-2018:2342-1SUSE-SU-2018:2344-1SUSE-SU-2018:2344-2SUSE-SU-2018:2345-1SUSE-SU-2018:2346-1SUSE-SU-2018:2347-1SUSE-SU-2018:2348-1SUSE-SU-2018:2349-1SUSE-SU-2018:2350-1SUSE-SU-2018:2351-1SUSE-SU-2018:2352-1SUSE-SU-2018:2353-1SUSE-SU-2018:2354-1SUSE-SU-2018:2355-1SUSE-SU-2018:2356-1SUSE-SU-2018:2358-1SUSE-SU-2018:2359-1SUSE-SU-2018:2362-1SUSE-SU-2018:2363-1SUSE-SU-2018:2364-1SUSE-SU-2018:2366-1SUSE-SU-2018:2367-1SUSE-SU-2018:2368-1SUSE-SU-2018:2369-1SUSE-SU-2018:2374-1SUSE-SU-2018:2380-1SUSE-SU-2018:2381-1SUSE-SU-2018:2384-1SUSE-SU-2018:2387-1SUSE-SU-2018:2389-1SUSE-SU-2018:2391-1SUSE-SU-2018:2413-1SUSE-SU-2018:2414-1SUSE-SU-2018:2416-1SUSE-SU-2018:2450-1SUSE-SU-2018:2472-1SUSE-SU-2018:2474-1SUSE-SU-2018:2528-1SUSE-SU-2018:2596-1SUSE-SU-2018:2637-1SUSE-SU-2018:2963-1SUSE-SU-2018:3490-1SUSE-SU-2018:4300-1USN-3740-1USN-3740-2USN-3741-1USN-3741-2USN-3742-1USN-3756-1
Timeline
- 14-08-2018PublishedVulnerability first disclosed.
- 29-05-2026Last modifiedVulnerability information updated.
Description
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
CVSS metrics
8 scores · 5 sources · 3 versionsMedium 5.6Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NSourcesAll 3 agree
- NVDNIST5.6MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
- OSV · UbuntuEcosystem advisory · calculated5.6MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Medium 5.6Preferred score · NVD (NIST)
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NSourcesAll 4 agree
- OSV · AlpineEcosystem advisory · calculated5.6MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
- OSV · UbuntuEcosystem advisory · calculated5.6MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated5.6MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Medium 4.7Preferred score · NVD (NIST)
AV:L/AC:M/Au:N/C:C/I:N/A:NSourcesSingle source
EPSS trend
Probability
8.10%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
Decrease -0.47 pp
From 8.57% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Version check
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Suse23 products
- kernel-livepatch-SLE15_Update_2&distro=SUSE Linux Enterprise Live Patching 15< 2-2.1
- kernel-livepatch-tools&distro=SUSE Linux Enterprise Live Patching 15< 1.1-5.3.1
- kgraft-patch-SLE12-SP3_Update_14&distro=SUSE Linux Enterprise Live Patching 12 SP3< 2-2.1
- kgraft-patch-SLE12-SP3_Update_15&distro=SUSE Linux Enterprise Live Patching 12 SP3< 2-2.1
- kgraft&distro=SUSE Linux Enterprise Live Patching 12< 1.0-23.9.1
Ubuntu17 products
- intel-microcode< 3.20180807a.0ubuntu0.14.04.1 | < 3.20180807a.0ubuntu0.16.04.1 | < 3.20180807a.0ubuntu0.18.04.1
- linux< 3.13.0-155.205 | < 4.4.0-133.159 | < 4.15.0-32.35
- linux-aws< 4.4.0-1027.30 | < 4.4.0-1065.75 | < 4.15.0-1019.19
- linux-azure< 4.15.0-1021.21~16.04.1 | < 4.15.0-1021.21
- linux-azure-fdeAll versions (No fix recorded)
Intel7 products
- core_i3_firmware330e | 330m | 330um | 350m | 370m | 380m | 380um | 390m | 530 | 540 | 550 | 560 | 2100 | 2100t | 2102 | 2105 | 2115c | 2120 | 2120t | 2125 | 2130 | 2310e | 2310m | 2312m | 2328m | 2330e | 2330m | 2340ue | 2348m | 2350m | 2357m | 2365m | 2367m | 2370m | 2375m | 2377m | 3110m | 3115c | 3120m | 3120me | 3130m | 3210 | 3217u | 3217ue | 3220 | 3220t | 3225 | 3227u | 3229y | 3240 | 3240t | 3245 | 3250 | 3250t | 4000m | 4005u | 4010u | 4010y | 4012y | 4020y | 4025u | 4030u | 4030y | 4100e | 4100m | 4100u | 4102e | 4110e | 4110m | 4112e | 4120u | 4130 | 4130t | 4150 | 4150t | 4158u | 4160 | 4160t | 4170 | 4170t | 4330 | 4330t | 4330te | 4340 | 4340te | 4350 | 4350t | 4360 | 4360t | 4370 | 4370t | 5005u | 5010u | 5015u | 5020u | 5157u | 6006u | 6098p | 6100 | 6100e | 6100h | 6100t | 6100te | 6100u | 6102e | 6157u | 6167u | 6300 | 6300t | 6320 | 8100 | 8350k
- core_i5_firmware430m | 430um | 450m | 460m | 470um | 480m | 520e | 520m | 520um | 540m | 540um | 560m | 560um | 580m | 650 | 655k | 660 | 661 | 670 | 680 | 750 | 750s | 760 | 2300 | 2310 | 2320 | 2380p | 2390t | 2400 | 2400s | 2405s | 2410m | 2430m | 2435m | 2450m | 2450p | 2467m | 2500 | 2500k | 2500s | 2500t | 2510e | 2515e | 2520m | 2537m | 2540m | 2550k | 2557m | 3210m | 3230m | 3317u | 3320m | 3330 | 3330s | 3337u | 3339y | 3340 | 3340m | 3340s | 3350p | 3360m | 3380m | 3427u | 3437u | 3439y | 3450 | 3450s | 3470 | 3470s | 3470t | 3475s | 3550 | 3550s | 3570 | 3570k | 3570s | 3570t | 3610me | 4200h | 4200m | 4200u | 4200y | 4202y | 4210h | 4210m | 4210u | 4210y | 4220y | 4250u | 4258u | 4260u | 4278u | 4288u | 4300m | 4300u | 4300y | 4302y | 4308u | 4310m | 4310u | 4330m | 4340m | 4350u | 4360u | 4400e | 4402e | 4402ec | 4410e | 4422e | 4430 | 4430s | 4440 | 4440s | 4460 | 4460s | 4460t | 4570 | 4570r | 4570s | 4570t | 4570te | 4590 | 4590s | 4590t | 4670 | 4670k | 4670r | 4670s | 4670t | 4690 | 4690k | 4690s | 4690t | 5200u | 5250u | 5257u | 5287u | 5300u | 5350h | 5350u | 5575r | 5675c | 5675r | 6200u | 6260u | 6267u | 6287u | 6300hq | 6300u | 6350hq | 6360u | 6400 | 6400t | 6402p | 6440eq | 6440hq | 6442eq | 6500 | 6500t | 6500te | 6585r | 6600 | 6600k | 6600t | 6685r | 8250u | 8350u | 8400 | 8600k
- core_i7_firmware7y75 | 610e | 620le | 620lm | 620m | 620ue | 620um | 640lm | 640m | 640um | 660lm | 660ue | 660um | 680um | 720qm | 740qm | 820qm | 840qm | 860 | 860s | 870 | 870s | 875k | 880 | 920 | 920xm | 930 | 940 | 940xm | 950 | 960 | 965 | 970 | 975 | 980 | 980x | 990x | 2600 | 2600k | 2600s | 2610ue | 2617m | 2620m | 2629m | 2630qm | 2635qm | 2637m | 2640m | 2649m | 2655le | 2657m | 2670qm | 2675qm | 2677m | 2700k | 2710qe | 2715qe | 2720qm | 2760qm | 2820qm | 2860qm | 2920xm | 2960xm | 3517u | 3517ue | 3520m | 3537u | 3540m | 3555le | 3610qe | 3610qm | 3612qe | 3612qm | 3615qe | 3615qm | 3630qm | 3632qm | 3635qm | 3667u | 3687u | 3689y | 3720qm | 3740qm | 3770 | 3770k | 3770s | 3770t | 3820qm | 3840qm | 4500u | 4510u | 4550u | 4558u | 4578u | 4600m | 4600u | 4610m | 4610y | 4650u | 4700ec | 4700eq | 4700hq | 4700mq | 4702ec | 4702hq | 4702mq | 4710hq | 4710mq | 4712hq | 4712mq | 4720hq | 4722hq | 4750hq | 4760hq | 4765t | 4770 | 4770hq | 4770k | 4770r | 4770s | 4770t | 4770te | 4771 | 4785t | 4790 | 4790k | 4790s | 4790t | 4800mq | 4810mq | 4850hq | 4860hq | 4870hq | 4900mq | 4910mq | 4950hq | 4960hq | 4980hq | 5500u | 5550u | 5557u | 5600u | 5650u | 5700eq | 5700hq | 5750hq | 5775c | 5775r | 5850eq | 5850hq | 5950hq | 7500u | 7560u | 7567u | 7600u | 7660u | 7700 | 7700hq | 7700k | 7700t | 7820eq | 7820hk | 7820hq | 7920hq | 8550u | 8650u | 8700 | 8700k
- core_m5y10 | 5y10a | 5y10c | 5y31 | 5y51 | 5y70 | 5y71
- core_m36y30 | 7y30 | 7y32
Debian3 products
- intel-microcode< 3.20180703.1
- linux< 4.17.15-1
- xen< 4.11.1~pre.20180911.5acdd26fdc+dfsg-2
Alpine1 product
- xen< 4.11.1-r0 | < 4.8.5-r0 | < 4.10.1-r3
Intel corporation1 product
- multipleMultiple
6 vendors · 52 products
References
87 linksShow all 87 references
- security.freebsd.org/advisories/FreeBSD-SA-18:09.l1tf.ascVendor AdvisoryX Refsource FREEBSDThird Party Advisory
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannelVendor AdvisoryX Refsource CISCOThird Party Advisory
- www.oracle.com/security-alerts/cpujul2020.htmlX Refsource MISC
- www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlX Refsource CONFIRM
- help.ecostruxureit.com/display/…X Refsource CONFIRM
portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018X Refsource CONFIRM- www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-enX Refsource CONFIRMThird Party Advisory
- www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.htmlX Refsource CONFIRMVendor Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-254686.pdfX Refsource CONFIRM
- support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_usX Refsource CONFIRMThird Party Advisory
- software.intel.com/security-software-guidance/software-guidance/l1-terminal-faultX Refsource CONFIRMMitigationVendor Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-608355.pdfX Refsource CONFIRM