CVE catalog

CVE-2018-3615

intel-microcode: CVE-2018-3615

[CVE catalog]

Severity
Medium · CVSS 6.4CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
Published
Source
[NVD] · [CVE record]
EPSS
6.30% · Oct 25, 2026

Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianintel-microcodesid3.20260227.1fixed
Debianintel-microcodeforky3.20260227.1fixed
Debianintel-microcodetrixie3.20251111.1~deb13u1fixed
Debianintel-microcodetrixie-security3.20250812.1~deb13u1fixed
Debianintel-microcodebookworm3.20251111.1~deb12u1fixed
Debianintel-microcodebookworm-security3.20250812.1~deb12u1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianintel-microcodesourcesid3.20180703.1not yet assignedNot reportedNot reported
Debianintel-microcodesourceforky3.20180703.1not yet assignedNot reportedNot reported
Debianintel-microcodesourcetrixie3.20180703.1not yet assignedNot reportedNot reported
Debianintel-microcodesourcebookworm3.20180703.1not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [intel-microcode]Fixed
    Details (1)

    • 3.20251111.1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.20180703.1

      dsa · intel-microcode · debian · bookworm; dsa · intel-microcode · debian · 12

[Debian 13 (Trixie)]

  • [intel-microcode]Fixed
    Details (1)

    • 3.20251111.1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.20180703.1

      dsa · intel-microcode · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]