--- title: "CVE-2018-3615\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2018-3615?format=md keywords: index, follow --- # CVE-2018-3615 Publication date 14 August 2018 Last updated 25 August 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) ## Cvss 3 Severity Score **6.4 · Medium** [Score breakdown](https://ubuntu.com/security/CVE-2018-3615?format=md#impact-score) Toggle side navigation ## Description Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis. [Read the notes from the security team](https://ubuntu.com/security/CVE-2018-3615?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | linux | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not affected | | linux-aws | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not affected | | linux-azure | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not affected | | linux-azure-edge | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-euclid | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-flo | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-gcp | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-gke | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Ignored end of standard support, was needs-triage | | 14.04 LTS trusty | Not in release | | linux-goldfish | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-grouper | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-hwe | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-hwe-edge | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-kvm | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-lts-trusty | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-lts-utopic | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-lts-vivid | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-lts-wily | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-lts-xenial | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not affected | | linux-maguro | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-mako | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-manta | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-oem | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-raspi2 | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-snapdragon | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## Notes --- ### [tyhicks](https://launchpad.net/~tyhicks) This issue does not affect the Linux kernel and requires no microcode updates ## Severity score breakdown CVSS version: CVSS v3.0 **Base score** 6.4 · Medium * Base metrics | Parameter | Value | | --- | --- | | Attack vector | Local | | Attack complexity | High | | Privileges required | Low | | User interaction | None | | Scope | Changed | | Confidentiality impact | High | | Integrity impact | Low | | Availability impact | None | * Scores | Parameter | Value | | --- | --- | | Base score | 6.4 · Medium | | Exploitability score | - | | Impact score | - | **Vector:** CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3615) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2018-3615) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2018-3615) * [Debian](https://security-tracker.debian.org/tracker/CVE-2018-3615) ### Other references * *