CVE-2022-21125

תיאור (מקור, אנגלית)

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

מדדים

CVSS 3.1

5.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS — סבירות ניצול

6% (אחוזון 100) נכון ל-19/10/2026

CWE

CWE-459

מוצרים מושפעים

xen: xen; fedoraproject: fedora; intel: sgx dcap; intel: sgx psw; intel: sgx sdk; vmware: esxi; debian: debian linux

קישורים

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0061‮… PatchVendor Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0061‮… PatchVendor Advisory
• http://www.openwall.com/lists/oss-security/2022/06/16/1 Mailing ListPatchThird Party Advisory
• http://xenbits.xen.org/xsa/advisory-404.html PatchThird Party Advisory
• http://www.openwall.com/lists/oss-security/2022/06/16/1 Mailing ListPatchThird Party Advisory
• http://xenbits.xen.org/xsa/advisory-404.html PatchThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html Mailing ListThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…