CVE-2022-21125Medium· 5.5▾ SunlitIncomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 1.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
6.5%
Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
xenfedora = 35fedora = 36sgx_dcap < 1.14.100.3sgx_psw < 2.16.100.3sgx_psw < 2.17.100.3sgx_sdk < 2.16.100.3sgx_sdk < 2.17.100.3esxi = 7.0debian_linux = 9.0debian_linux = 10.0debian_linux = 11.0Upgrade past the affected range:
sgx_dcap 1.14.100.3sgx_psw 2.17.100.3sgx_sdk 2.17.100.3Connected by shared product, vendor, weakness, or advisory.
CVE-2022-21166Medium· 5.5Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2022-21123Medium· 5.5Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2022-1473High· 7.5The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries
CVE-2022-26373Medium· 5.5Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
CVE-2020-24489High· 8.8Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-0171Medium· 5.5A flaw was found in the Linux kernel