← Back

CVE-2022-21127

nvd nist
Published: Jun 15, 2022Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Affected (9)

Xen
1 product
Xen
Intel
3 products
Sgx Dcap
Sgx Psw
Sgx Sdk
Debian
1 product
Debian Linux
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Xen
All versions
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Intel
Sgx Dcap
Before 1.14.100.3
Sgx Dcap
Before 1.14.100.3
Intel
Sgx Psw
Before 2.17.100.3
Sgx Psw
Before 2.16.100.3
Intel
Sgx Sdk
Before 2.17.100.3
Sgx Sdk
Before 2.16.100.3
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 10.0
Debian Linux
Version 11.0

Related CWEs

CWE-459
Incomplete Cleanup
The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

References (8)

Source: secure@intel.com
Mailing ListPatchThird Party Advisory
Source: secure@intel.com
Third Party Advisory
Source: secure@intel.com
Third Party Advisory
Source: secure@intel.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.