CVE-2022-40982

MEDIUM

Intel(R) Processors - Info Disclosure

Title source: llm

Description

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

References (15)

[Exploit, Mitigation, Vendor Advisory] http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html

[Third Party Advisory] https://access.redhat.com/solutions/7027704

[Third Party Advisory] https://aws.amazon.com/security/security-bulletins/AWS-2023-007/

[Exploit, Technical Description, Third Party Advisory] https://downfall.page

[Mailing List, Third Party Advisory] https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html

[Mailing List] https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html

[Third Party Advisory] https://security.netapp.com/advisory/ntap-20230811-0001/

[Mailing List, Third Party Advisory] https://www.debian.org/security/2023/dsa-5474

[Mailing List, Third Party Advisory] https://www.debian.org/security/2023/dsa-5475

[Mitigation, Third Party Advisory] https://xenbits.xen.org/xsa/advisory-435.html

[Various Sources] http://xenbits.xen.org/xsa/advisory-435.html

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/

Scores

CVSS v3 6.5

EPSS 0.0079

EPSS Percentile 73.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Classification

CWE

CWE-1342 CWE-203

Status published

Affected Products (50)

redhat/enterprise_linux

xen/xen

intel/microcode < 20230808

intel/xeon_e-2314_firmware

intel/xeon_e-2324g_firmware

intel/xeon_e-2334_firmware

intel/xeon_e-2374g_firmware

intel/xeon_e-2336_firmware

intel/xeon_e-2356g_firmware

intel/xeon_e-2386g_firmware

intel/xeon_e-2378_firmware

intel/xeon_e-2378g_firmware

... and 35 more

Timeline

Published Aug 11, 2023

Tracked Since Feb 18, 2026