Logo
›
›vulnerability›CVE-2022-21166
Name
CVE-2022-21166
Source
NVD ( link)Debian ( link)
Description
Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CWEs
CWE-459 CWE-459
Published Date
Updated Date
Workaround
-
Advisories
http://www.openwall.com/lists/oss-security/2022/06/16/1Mailing List
https://lists.debian.org/debian-lts-announce/2022/07/msg00000.htmlMailing List
https://security.gentoo.org/glsa/202208-23Third Party Advisory
https://security.netapp.com/advisory/ntap-20220624-0008/Third Party Advisory
https://www.debian.org/security/2022/dsa-5173Third Party Advisory
https://www.debian.org/security/2022/dsa-5178Third Party Advisory
https://www.debian.org/security/2022/dsa-5184Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.htmlPatch
http://www.openwall.com/lists/oss-security/2022/06/16/1Mailing List
https://lists.debian.org/debian-lts-announce/2022/07/msg00000.htmlMailing List
https://security.gentoo.org/glsa/202208-23Third Party Advisory
https://security.netapp.com/advisory/ntap-20220624-0008/Third Party Advisory
https://www.debian.org/security/2022/dsa-5173Third Party Advisory
https://www.debian.org/security/2022/dsa-5178Third Party Advisory
https://www.debian.org/security/2022/dsa-5184Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.htmlPatch

Analysis#

Affected Component
Analysis
xen
Exploitable

Vulnerability Ratings#

5.5
CVSSv31
5.5
CVSSv31
2.1
CVSSv2
NaN
other

Others affected component#

Name
Project
Project Version
Version
Status
xen
buildroot
master
4.19.5
Exploitable