CVEvulnerability
CVE-2022-0001
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-03-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
Affected configurations
• intel atom p5921b
• intel atom p5931b
• intel atom p5942b
• intel atom p5962b
• intel atom x6200fe
• intel atom x6211e
• intel atom x6212re
• intel atom x6413e
• intel atom x6425e
• intel atom x6425re
• intel atom x6427fe
• intel celeron 5305u
• intel celeron 6305
• intel celeron 6305e
• intel celeron 6600he
• intel celeron g5205u
• intel celeron g5305u
• intel celeron g5900
• intel celeron g5900t
• intel celeron g5905
• intel celeron g5905t
• intel celeron g5920
• intel celeron g5925
• intel celeron g6900
• intel celeron g6900t
• intel celeron j4005
• intel celeron j4025
• intel celeron j4105
• intel celeron j4125
• intel celeron j6413
• intel celeron n4000
• intel celeron n4020
• intel celeron n4100
• intel celeron n4120
• intel celeron n4500
• intel celeron n4504
• intel celeron n5100
• intel celeron n5105
• intel celeron n6211
• intel core i3-1000g1
• intel core i3-1000g4
• intel core i3-1005g1
• intel core i3-10100
• intel core i3-10100f
• intel core i3-10100t
• intel core i3-10100te
• intel core i3-10105
• intel core i3-10105f
• intel core i3-10105t
• intel core i3-10110u
• intel core i3-10300
• intel core i3-10300t
• intel core i3-10305
• intel core i3-10305t
• intel core i3-10320
• intel core i3-10325
• intel core i3-11100he
• intel core i3-1110g4
• intel core i3-1115g4
• intel core i3-1115g4e
… and 398 more
Related
Referenced by CWE · observed example (1)
- CWE-1423 Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution weakness
References
- http://www.openwall.com/lists/oss-security/2022/03/18/2 Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220818-0004/ Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00598.html Vendor Advisory
- https://www.kb.cert.org/vuls/id/155143 www.kb.cert.org
- https://www.oracle.com/security-alerts/cpujul2022.html Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/03/18/2 Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220818-0004/ Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00598.html Vendor Advisory
- https://www.kb.cert.org/vuls/id/155143 www.kb.cert.org
- https://www.oracle.com/security-alerts/cpujul2022.html Patch, Third Party Advisory
- https://www.vicarius.io/vsociety/posts/cve-2022-0001-detect-specter-vulnerability?prevUrl=wizard www.vicarius.io
- https://www.vicarius.io/vsociety/posts/cve-2022-0001-mitigate-specter-vulnerability?prevUrl=wizard www.vicarius.io