Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Fix
Patch, vendor advisory and mitigation references on NVD 6
- http://www.openwall.com/lists/oss-security/2022/06/16/1 Mailing List, Patch, Third Party Advisory
- http://xenbits.xen.org/xsa/advisory-404.html Patch, Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2022/06/16/1 Mailing List, Patch, Third Party Advisory
- http://xenbits.xen.org/xsa/advisory-404.html Patch, Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html Patch, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · xen, fedoraproject, intelNVD modified 2026-10-14 16:17
Affected (CPE criteria) 25
cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:*cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*cpe:2.3:a:intel:sgx_dcap:*:*:*:*:*:linux:*:*cpe:2.3:a:intel:sgx_dcap:*:*:*:*:*:windows:*:*cpe:2.3:a:intel:sgx_psw:*:*:*:*:*:windows:*:*cpe:2.3:a:intel:sgx_psw:*:*:*:*:*:linux:*:*cpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:windows:*:*cpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:linux:*:*cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:*cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:*cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:*cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:*cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:*cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:*cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:*cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
References 27
- http://www.openwall.com/lists/oss-security/2022/06/16/1 Mailing List, Patch, Third Party Advisory
- http://xenbits.xen.org/xsa/advisory-404.html Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/
- https://security.gentoo.org/glsa/202208-23 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220624-0008/ Third Party Advisory
- https://www.debian.org/security/2022/dsa-5173 Third Party Advisory
- https://www.debian.org/security/2022/dsa-5178 Third Party Advisory
- https://www.debian.org/security/2022/dsa-5184 Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2022/06/16/1 Mailing List, Patch, Third Party Advisory
- http://xenbits.xen.org/xsa/advisory-404.html Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/
- https://security.gentoo.org/glsa/202208-23 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220624-0008/ Third Party Advisory
- https://www.debian.org/security/2022/dsa-5173 Third Party Advisory
- https://www.debian.org/security/2022/dsa-5178 Third Party Advisory
- https://www.debian.org/security/2022/dsa-5184 Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html Patch, Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html