CVE-2022-21123

תיאור (מקור, אנגלית)

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

מדדים

CVSS 3.1

5.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS — סבירות ניצול

7% (אחוזון 100) נכון ל-19/10/2026

CWE

CWE-459

מוצרים מושפעים

xen: xen; fedoraproject: fedora; intel: sgx dcap; intel: sgx psw; intel: sgx sdk; vmware: esxi; debian: debian linux

קישורים

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0061‮… PatchVendor Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0061‮… PatchVendor Advisory
• http://www.openwall.com/lists/oss-security/2022/06/16/1 Mailing ListPatchThird Party Advisory
• http://www.openwall.com/lists/oss-security/2022/06/16/1 Mailing ListPatchThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html Mailing ListThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…
• https://security.gentoo.org/glsa/202208-23 Third Party Advisory