This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-12127 →

DEBIAN-CVE-2018-12127

Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user...

Original description

The description as published by the source.

Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 intel-microcode

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20190514.1"}]}]

Debian:13 intel-microcode

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20190514.1"}]}]

Debian:14 intel-microcode

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20190514.1"}]}]

Debian:12 linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.37-2"}]}]

Debian:13 linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.37-2"}]}]

Debian:14 linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.37-2"}]}]

Debian:12 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.1+92-g6c33308a8d-1"}]}]

Debian:13 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.1+92-g6c33308a8d-1"}]}]

Debian:14 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.1+92-g6c33308a8d-1"}]}]