CVEvulnerability
CVE-2022-40982
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-08-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- Weaknesses
- CWE-1342, CWE-203
Description
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Affected configurations
• redhat enterprise linux 6.0
• redhat enterprise linux 7.0
• redhat enterprise linux 8.0
• redhat enterprise linux 9.0
• xen xen
• intel microcode (< 20230808)
• intel xeon e-2314 firmware
• intel xeon e-2324g firmware
• intel xeon e-2334 firmware
• intel xeon e-2374g firmware
• intel xeon e-2336 firmware
• intel xeon e-2356g firmware
• intel xeon e-2386g firmware
• intel xeon e-2378 firmware
• intel xeon e-2378g firmware
• intel xeon e-2388g firmware
• intel xeon w-1350 firmware
• intel xeon w-1350p firmware
• intel xeon w-1370 firmware
• intel xeon w-1370p firmware
• intel xeon w-1390t firmware
• intel xeon w-1390 firmware
• intel xeon w-1390p firmware
• intel core i9-11900t firmware
• intel core i9-11900f firmware
• intel core i9-11900 firmware
• intel core i9-11900kf firmware
• intel core i9-11900k firmware
• intel core i7-11700t firmware
• intel core i7-11700f firmware
• intel core i7-11700 firmware
• intel core i7-11700kf firmware
• intel core i7-11700k firmware
• intel core i5-11400t firmware
• intel core i5-11400f firmware
• intel core i5-11400 firmware
• intel core i5-11500t firmware
• intel core i5-11500 firmware
• intel core i5-11600t firmware
• intel core i5-11600 firmware
• intel core i5-11600kf firmware
• intel core i5-11600k firmware
• intel celeron g5900t firmware
• intel celeron g5920 firmware
• intel celeron g5900 firmware
• intel celeron g5925 firmware
• intel celeron g5905t firmware
• intel celeron g5905 firmware
• intel pentium gold g6500t firmware
• intel pentium gold g6600 firmware
• intel pentium gold g6400t firmware
• intel pentium gold g6400 firmware
• intel pentium gold g6500 firmware
• intel pentium gold g6605 firmware
• intel pentium gold g6505t firmware
• intel pentium gold g6505 firmware
• intel pentium gold g6405 firmware
• intel pentium gold g6405t firmware
• intel core i3-10100t firmware
• intel core i3-10100 firmware
… and 479 more
Related
References
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html Exploit, Mitigation, Vendor Advisory
- https://access.redhat.com/solutions/7027704 Third Party Advisory
- https://aws.amazon.com/security/security-bulletins/AWS-2023-007/ Third Party Advisory
- https://downfall.page Exploit, Technical Description, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html lists.debian.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/ lists.fedoraproject.org
- https://security.netapp.com/advisory/ntap-20230811-0001/ Third Party Advisory
- https://www.debian.org/security/2023/dsa-5474 Mailing List, Third Party Advisory
- https://www.debian.org/security/2023/dsa-5475 Mailing List, Third Party Advisory
- https://xenbits.xen.org/xsa/advisory-435.html Mitigation, Third Party Advisory
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html Exploit, Mitigation, Vendor Advisory
- http://xenbits.xen.org/xsa/advisory-435.html xenbits.xen.org
- https://access.redhat.com/solutions/7027704 Third Party Advisory
- https://aws.amazon.com/security/security-bulletins/AWS-2023-007/ Third Party Advisory
- https://downfall.page Exploit, Technical Description, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html lists.debian.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/ lists.fedoraproject.org
- https://security.netapp.com/advisory/ntap-20230811-0001/ Third Party Advisory
- https://www.debian.org/security/2023/dsa-5474 Mailing List, Third Party Advisory
- https://www.debian.org/security/2023/dsa-5475 Mailing List, Third Party Advisory
- https://xenbits.xen.org/xsa/advisory-435.html Mitigation, Third Party Advisory