CVE-2022-21166

תיאור (מקור, אנגלית)

Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

מדדים

CVSS 3.1

5.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS — סבירות ניצול

6% (אחוזון 100) נכון ל-19/10/2026

CWE

CWE-459

מוצרים מושפעים

xen: xen; fedoraproject: fedora; intel: sgx dcap; intel: sgx psw; intel: sgx sdk; vmware: esxi; debian: debian linux

קישורים

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0061‮… PatchVendor Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0061‮… PatchVendor Advisory
• http://www.openwall.com/lists/oss-security/2022/06/16/1 Mailing ListPatchThird Party Advisory
• http://www.openwall.com/lists/oss-security/2022/06/16/1 Mailing ListPatchThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html Mailing ListThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…
• https://security.gentoo.org/glsa/202208-23 Third Party Advisory