CVE-2022-21125

Published: Jun 15, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Affected (25)

Products: Xen: Xen · Fedoraproject: Fedora · Intel: Sgx Dcap, Sgx Psw, Sgx Sdk · +2 more

Show all products

Xen: Xen · Fedoraproject: Fedora · Intel: Sgx Dcap, Sgx Psw, Sgx Sdk · Vmware: Esxi · Debian: Debian Linux

1 product

1 product

3 products

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	All versions

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 35
Fedoraproject Fedora	Version 36

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Intel Sgx Dcap	Before 1.14.100.3
Intel Sgx Dcap	Before 1.14.100.3
Intel Sgx Psw	Before 2.17.100.3
Intel Sgx Psw	Before 2.16.100.3
Intel Sgx Sdk	Before 2.17.100.3
Intel Sgx Sdk	Before 2.16.100.3

Configuration D

13 vulnerable

Vulnerable Software	Affected Versions
Vmware Esxi	Version 7.0
Vmware Esxi	Version 7.0 beta
Vmware Esxi	Version 7.0 update_1
Vmware Esxi	Version 7.0 update_1a
Vmware Esxi	Version 7.0 update_1b
Vmware Esxi	Version 7.0 update_1c
Vmware Esxi	Version 7.0 update_1d
Vmware Esxi	Version 7.0 update_2
Vmware Esxi	Version 7.0 update_2a
Vmware Esxi	Version 7.0 update_2c
Vmware Esxi	Version 7.0 update_2d
Vmware Esxi	Version 7.0 update_3c
Vmware Esxi	Version 7.0 update_3d

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0
Debian Debian Linux	Version 9.0

Related CWEs

Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

References (26)

http://www.openwall.com/lists/oss-security/2022/06/16/1

Source: secure@intel.com

Mailing ListPatchThird Party Advisory

http://xenbits.xen.org/xsa/advisory-404.html

Source: secure@intel.com

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html

Source: secure@intel.com

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/

Source: secure@intel.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/

Source: secure@intel.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/

Source: secure@intel.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/

Source: secure@intel.com

https://security.gentoo.org/glsa/202208-23

Source: secure@intel.com

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220624-0008/

Source: secure@intel.com

Third Party Advisory

https://www.debian.org/security/2022/dsa-5173

Source: secure@intel.com

Third Party Advisory

https://www.debian.org/security/2022/dsa-5178

Source: secure@intel.com

Third Party Advisory

https://www.debian.org/security/2022/dsa-5184

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html

Source: secure@intel.com

PatchVendor Advisory

http://www.openwall.com/lists/oss-security/2022/06/16/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://xenbits.xen.org/xsa/advisory-404.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202208-23

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220624-0008/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2022/dsa-5173

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2022/dsa-5178

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2022/dsa-5184

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.