PT-2022-1954 · Intel+9 · Intel Processors+9

Published 2022-03-08 · Updated 2024-04-11 · CVE-2022-0002

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Processors (affected versions not specified)

Description The issue is related to errors in parameter processing in the implementation of the Intra-mode BTI (IMBTI) mode of Intel processor microcode. It may allow an authorized user to potentially enable information disclosure via local access. The vulnerability is associated with non-transparent sharing of branch predictor within a context in some Intel processors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-235

CWE-141

CWE-233

Related Identifiers

ALSA-2022:1988

ALT-PU-2022-1662

BDU:2022-01511

CESA-2022_1975

CESA-2022_1988

CVE-2022-0002

DLA-2940-1

DLA-2941-1

DSA-5095-1

DSA-5096-1

MGASA-2022-0100

MGASA-2022-0101

OESA-2022-1691

OPENSUSE-SU-2022:0755-1

OPENSUSE-SU-2022:0760-1

OPENSUSE-SU-2022:0768-1

OPENSUSE-SU-2022:0940-1

OPENSUSE-SU-2022_0755-1

OPENSUSE-SU-2022_0760-1

OPENSUSE-SU-2022_0768-1

OPENSUSE-SU-2022_0940-1

RHSA-2022:1975

RHSA-2022:1988

RHSA-2022_1975

RHSA-2022_1988

RLSA-2022:1975

RLSA-2022:1988

SUSE-SU-2022:0755-1

SUSE-SU-2022:0756-1

SUSE-SU-2022:0757-1

SUSE-SU-2022:0759-1

SUSE-SU-2022:0760-1

SUSE-SU-2022:0761-1

SUSE-SU-2022:0762-1

SUSE-SU-2022:0763-1

SUSE-SU-2022:0764-1

SUSE-SU-2022:0765-1

SUSE-SU-2022:0766-1

SUSE-SU-2022:0767-1

SUSE-SU-2022:0768-1

SUSE-SU-2022:0931-1

SUSE-SU-2022:0939-1

SUSE-SU-2022:0940-1

SUSE-SU-2022:1196-1

SUSE-SU-2022:1285-1

SUSE-SU-2022:1300-1

SUSE-SU-2022:1359-1

SUSE-SU-2022:1375-1

SUSE-SU-2022:1408-1

SUSE-SU-2022:14905-1

SUSE-SU-2022_14905-1

USN-5317-1

USN-5318-1

USN-5319-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Intel Processors

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

References · 459

• https://advisories.mageia.org/MGASA-2022-0100.html · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-0002 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:1285-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:1988 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0101.html · Security Note
• https://osv.dev/vulnerability/CVE-2022-0002 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2940-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1975 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0761-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23960 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0755-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1110SE17 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1988 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1691 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5095-1 · Vendor Advisory