lists.debian.org
https://lists.debian.org/debian-lts-announce/2024/05/msg00003.html CVE-2023-38575
MEDIUM
Record summary
CVE-2023-38575 has a selected CVSS score of 5.5 (medium).
Description
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 27, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Intel(R) ProcessorsDefault status: unaffected | CVE List | some Intel(R) Processors | affected |
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-38575 security.netapp.com
https://security.netapp.com/advisory/ntap-20240405-0008 intel.com
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html