PT-2022-4299 · Intel+10 · Intel Processors+10

Alan Miller + 4 · Published 2022-06-14 · Updated 2023-03-03 · CVE-2022-21125

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) Processors (affected versions not specified)

Description The issue is related to the incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors, which may allow an authenticated user to potentially enable information disclosure via local access. This vulnerability is associated with the disclosure of information and can be exploited by an attacker to reveal protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

CWE-459

Related Identifiers

ALSA-2022:6437

ALSA-2022:6460

ALSA-2022:7933

ALSA-2022:8267

ALT-PU-2022-2071

ALT-PU-2022-2278

BDU:2022-05155

CESA-2022_5937

CESA-2022_6437

CESA-2022_6460

CVE-2022-21125

DLA-3065-1

DSA-5173-1

DSA-5178-1

DSA-5184-1

MGASA-2022-0242

MGASA-2022-0243

OESA-2022-1750

OPENSUSE-SU-2022:2177-1

OPENSUSE-SU-2022_2078-1

OPENSUSE-SU-2022_2079-1

OPENSUSE-SU-2022_2111-1

OPENSUSE-SU-2022_2520-1

OPENSUSE-SU-2022_2597-1

OPENSUSE-SU-2022_2599-1

OPENSUSE-SU-2022_2615-1

RHSA-2022:5937

RHSA-2022:5939

RHSA-2022:6437

RHSA-2022:6460

RHSA-2022:6872

RHSA-2022:6983

RHSA-2022:6991

RHSA-2022:7279

RHSA-2022:7280

RHSA-2022:7933

RHSA-2022:8267

RHSA-2022:8973

RHSA-2022:8974

RHSA-2022_5937

RHSA-2022_5939

RHSA-2022_6437

RHSA-2022_6460

RHSA-2022_7933

RHSA-2022_8267

RLSA-2022:6437

RLSA-2022:6460

SUSE-SU-2022:2077-1

SUSE-SU-2022:2078-1

SUSE-SU-2022:2079-1

SUSE-SU-2022:2080-1

SUSE-SU-2022:2082-1

SUSE-SU-2022:2083-1

SUSE-SU-2022:2103-1

SUSE-SU-2022:2104-1

SUSE-SU-2022:2111-1

SUSE-SU-2022:2116-1

SUSE-SU-2022:2177-1

SUSE-SU-2022:2520-1

SUSE-SU-2022:2557-1

SUSE-SU-2022:2560-1

SUSE-SU-2022:2569-1

SUSE-SU-2022:2574-1

SUSE-SU-2022:2591-1

SUSE-SU-2022:2597-1

SUSE-SU-2022:2599-1

SUSE-SU-2022:2599-2

SUSE-SU-2022:2600-1

SUSE-SU-2022:2601-1

SUSE-SU-2022:2615-1

SUSE-SU-2022:2629-1

SUSE-SU-2023:0416-1

USN-5484-1

USN-5485-1

USN-5485-2

USN-5505-1

USN-5513-1

USN-5529-1

USN-5535-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Intel Processors

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Windows

References · 811

• https://osv.dev/vulnerability/SUSE-SU-2022:2078-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2601-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:6437 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21125 · Security Note
• https://ubuntu.com/security/CVE-2022-1679 · Vendor Advisory
• https://debian.org/security/2022/dsa-5178 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0330 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-9481.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33120 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2599-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5505-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-0146 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1652 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:8267 · Vendor Advisory