CVE Database›Document archive›CVE-2018-12130

CVE-2018-12130

hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)

Loading…

Severity

Important

Red Hat Product Security

6.2

CVSS 3.0

Review impact separately from score.

Published · May 15, 2019

Updated · June 28, 2026

Description

A flaw was found in the implementation of the "fill buffer", a mechanism used by modern CPUs when a cache-miss is made on L1 CPU cache. If an attacker can generate a load operation that would create a page fault, the execution will continue speculatively with incorrect data from the fill buffer while the data is fetched from higher level caches. This response time can be measured to infer data in the fill buffer.

Statement

Red Hat Product Security is aware of this issue. Updates will be released as they become available. For additional information, please refer to the 'Vulnerability Response' URL.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 6.2
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-208 · Observable Timing Discrepancy