CVE-2022-40982 — Downfall: Information Exposure through Microarchitectural State after Transient Execution in Intel CPUs
Severity
6.5MEDIUMNVD
OSV5.5OSV4.7
EPSS
0.9%
top 25.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 11
Latest updateOct 17
Description
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:NExploitability: 2.0 | Impact: 4.0
Affected Packages3 packages
Also affects: Debian Linux 10.0, 11.0, 12.0, Enterprise Linux 6.0, 7.0, 8.0, 9.0
🔴Vulnerability Details
21OSV▶
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-oracle vulnerabilities↗2023-09-26