PT-2023-4328 · Intel+9 · Intel Processors+9
Daniel Moghimi
·
Published
2023-08-08
·
Updated
2025-09-26
·
CVE-2022-40982
CVSS v3.1
6.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Intel Processors versions prior to the fixed version
Description
The issue is related to information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors. This may allow an authenticated user to potentially enable information disclosure via local access. The vulnerability, known as Downfall, affects Intel consumer and server processors ranging from the Skylake family to Rocket Lake. It enables a user to access and steal data from other users who share the same computer. The vulnerability is caused by memory optimization features in Intel processors that unintentionally reveal internal data.
Recommendations
To resolve the issue, update the microcode to the latest version. However, this may lead to a loss of performance. For mitigation, consider disabling the gather instruction, which is used in the Downfall attack, until a patch is available. Additionally, restrict access to sensitive data and use secure communication protocols to minimize the risk of exploitation.
Note: The exact mitigation measures may vary depending on the specific system configuration and the affected Intel processor version. It is recommended to consult the official Intel documentation and security advisories for detailed guidance on resolving the issue.
Exploit
Fix
Side Channel Attack
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Intel Processors
Linuxmint
Red Hat
Red Os
Suse
Ubuntu