Red Hat Security Advisory: rhvm-appliance security update
Affects Red Hat rhvm-applianceSource GCVE Database
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 13 Nov 2026, 18:31 UTC
What to do
AI-suggested
Red Hat has released updated kernel packages that provide software-based mitigations for these hardware vulnerabilities. Users should apply these updates to reduce risk, understanding that complete remediation is not possible due to the hardware nature of the flaws. The mitigations may incur a performance penalty. No additional action is required beyond applying the vendor-provided updates.
Description
This advisory addresses speculative execution vulnerabilities affecting the Red Hat Virtualization Manager appliance. These hardware-level flaws allow unprivileged attackers to read privileged memory via cache side-channel attacks. Software mitigations are provided but cannot fully fix the hardware issue and may impact performance. The affected variants are CVE-2017-5753, CVE-2017-5715, and CVE-2017-5754, with the latter affecting only Intel x86-64 processors.
References
- access.redhat.com/errata/RHSA-2018:0045 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
- access.redhat.com/solutions/3307851 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2017-5753 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2017-5754 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1519778 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1519781 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0045.json (opens in a new tab)