{"id":"CVE-2022-21125","title":"Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.","summary":"Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-459","CWE-459"],"vendor":"intel","product":"sgx_dcap","affected":["xen","fedora = 35","fedora = 36","sgx_dcap < 1.14.100.3","sgx_psw < 2.16.100.3","sgx_psw < 2.17.100.3","sgx_sdk < 2.16.100.3","sgx_sdk < 2.17.100.3","esxi = 7.0","debian_linux = 9.0","debian_linux = 10.0","debian_linux = 11.0"],"patched":["sgx_dcap 1.14.100.3","sgx_psw 2.17.100.3","sgx_sdk 2.17.100.3"],"published":"2022-06-15","updated":"2026-10-14","sourceUpdated":"2026-10-14T16:17:24.477","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-21125","references":[{"url":"http://www.openwall.com/lists/oss-security/2022/06/16/1","label":"secure@intel.com"},{"url":"http://xenbits.xen.org/xsa/advisory-404.html","label":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html","label":"secure@intel.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/","label":"secure@intel.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/","label":"secure@intel.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/","label":"secure@intel.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/","label":"secure@intel.com"},{"url":"https://security.gentoo.org/glsa/202208-23","label":"secure@intel.com"},{"url":"https://security.netapp.com/advisory/ntap-20220624-0008/","label":"secure@intel.com"},{"url":"https://www.debian.org/security/2022/dsa-5173","label":"secure@intel.com"},{"url":"https://www.debian.org/security/2022/dsa-5178","label":"secure@intel.com"},{"url":"https://www.debian.org/security/2022/dsa-5184","label":"secure@intel.com"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html","label":"secure@intel.com"},{"url":"http://www.openwall.com/lists/oss-security/2022/06/16/1","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenbits.xen.org/xsa/advisory-404.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202208-23","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20220624-0008/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2022/dsa-5173","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2022/dsa-5178","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2022/dsa-5184","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd"],"epss":0.06451,"epssPercentile":0.93591,"ingestedAt":"2026-10-14T16:40:32.047Z","slug":"CVE-2022-21125","body":"## Overview\n\nIncomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.\n\n## Affected\n\n- `xen`\n- `fedora = 35`\n- `fedora = 36`\n- `sgx_dcap < 1.14.100.3`\n- `sgx_psw < 2.16.100.3`\n- `sgx_psw < 2.17.100.3`\n- `sgx_sdk < 2.16.100.3`\n- `sgx_sdk < 2.17.100.3`\n- `esxi = 7.0`\n- `debian_linux = 9.0`\n- `debian_linux = 10.0`\n- `debian_linux = 11.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `sgx_dcap 1.14.100.3`\n- `sgx_psw 2.17.100.3`\n- `sgx_sdk 2.17.100.3`","depth":"sunlit","depthScore":32,"depthScoreParts":{"impact":30.3,"likelihood":1.3,"exploitation":0,"ransomware":0},"changes":[]}