Red Hat issued a security advisory on recently disclosed CVEs (common vulnerabilities and exposures) in Intel microprocessors. Credit: Melissa Riofrio/IDG Four vulnerabilities were publicly disclosed related to Intel microprocessors. These vulnerabilities allow unprivileged attackers to bypass restrictions to gain read access to privileged memory. They include these common vulnerabilities and exposures (CVEs): CVE-2018-12126 – a flaw that could lead to information disclosure from the processor store buffer CVE-2018-12127 – an exploit of the microprocessor load operations that can provide data to an attacker about CPU registers and operations in the CPU pipeline CVE-2018-12130 – the most serious of the three issues and involved the implementation of the microprocessor fill buffers and can expose data within that buffer CVE-2019-11091 – a flaw in the implementation of the “fill buffer,” a mechanism used by modern CPUs when a cache-miss is made on L1 CPU cache Red Hat customers should update their systems Security updates will degrade system performance, but Red Hat strongly suggests that customers update their systems whether or not they believe themselves to be at risk. Red Hat versions affected include: Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Atomic Host Red Hat Enterprise MRG 2 Red Hat OpenShift Online v2 Red Hat OpenShift Online v3 Red Hat Virtualization (RHV/RHV-H) Red Hat OpenStack Platform For Red Hat, vulnerability information is available at this Red Hat vulnerabilities site. It is important to understand that an attacker cannot use this vulnerability to target specific data. Attacks would likely require sampling over a period of time, along with the application of statistical methods to reconstruct data that might be of value to them. Related content how-to Shredding files on Linux with the shred command The shred command is a good option for removing files from a Linux system in a way that makes them virtually impossible to recover. By Sandra Henry-Stocker Apr 18, 2024 4 mins Linux how-to Who's logging into your Linux servers? A few Linux commands offer different ways to see which users are logging into your Linux servers, how often they log in, and how long they’ve been active or idle. By Sandra Henry-Stocker Apr 15, 2024 4 mins Linux how-to Working with directories on Linux Directories provide a hierarchical way to organize your files, and you can categorize them to suit your needs. By Sandra Henry-Stocker Apr 04, 2024 5 mins Linux opinion Getting ready for World Backup Day 2024 The annual World Backup Day, which is March 31, is a good reminder to review your backup policies and practices. By Sandra Henry-Stocker Mar 29, 2024 3 mins Linux PODCASTS VIDEOS RESOURCES EVENTS NEWSLETTERS Newsletter Promo Module Test Description for newsletter promo module. Please enter a valid email address Subscribe