CVE-2022-21151 — Improper Removal of Sensitive Information Before Storage or Transfer in Intel-microcode
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 83.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 12
Latest updateDec 7
Description
Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6
Affected Packages1 packages
Also affects: Debian Linux 10.0, 11.0
🔴Vulnerability Details
4GHSA▶
GHSA-f82m-qq46-pcww: Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially e↗2022-05-13
OSV▶
CVE-2022-21151: Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially e↗2022-05-12
📋Vendor Advisories
5Debian▶
CVE-2022-21151: intel-microcode - Processor optimization removal or modification of security-critical code for som...↗2022