medium5.5
CVE-2022-21127
Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information …
Impact
Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xen | Xen | All versions |
| Intel | Sgx Dcap | before 1.14.100.3 |
| Intel | Sgx Psw | before 2.16.100.3 before 2.17.100.3 |
| Intel | Sgx Sdk | before 2.16.100.3 before 2.17.100.3 |
| Debian | Debian Linux | Versions 10.0, 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2022/06/16/1
- https://security.netapp.com/advisory/ntap-20220624-0008/
- https://www.debian.org/security/2022/dsa-5178
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html
- http://www.openwall.com/lists/oss-security/2022/06/16/1
- https://security.netapp.com/advisory/ntap-20220624-0008/
- https://www.debian.org/security/2022/dsa-5178
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html