CVE-2022-26373

תיאור (מקור, אנגלית)

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

מדדים

CVSS 3.1

5.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

מוצרים מושפעים

intel: xeon platinum 8253 firmware; intel: xeon platinum 8253; intel: xeon platinum 8256 firmware; intel: xeon platinum 8256; intel: xeon platinum 8260 firmware; intel: xeon platinum 8260; intel: xeon platinum 8260l firmware; intel: xeon platinum 8260l; intel: xeon platinum 8260m firmware; intel: xeon platinum 8260m; intel: xeon platinum 8260y firmware; intel: xeon platinum 8260y; intel: xeon platinum 8268 firmware; intel: xeon platinum 8268; intel: xeon platinum 8270 firmware

קישורים

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0070‮… Vendor Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0070‮… Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html Mailing ListThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html Mailing ListThird Party Advisory
• https://security.netapp.com/advisory/ntap-20221007-0005/ Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html Mailing ListThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html Mailing ListThird Party Advisory
• https://security.netapp.com/advisory/ntap-20221007-0005/ Third Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-794697.html