CVE-2022-21127: Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local…

Description

Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

None

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)5.5% · higher than 93% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

DL

Debian Linux · Debian

10.0; 11.0 · source: NVD

SD

Sgx Dcap · Intel

before 1.14.100.3; before 1.14.100.3 · source: NVD

SP

Sgx Psw · Intel

before 2.16.100.3; before 2.17.100.3 · source: NVD

SS

Sgx Sdk · Intel

before 2.16.100.3; before 2.17.100.3 · source: NVD

XE

Xen · Xen

All versions, or not specified · source: NVD