CVE-2022-21123: Medium severity XEN Xen vulnerability
A flaw was found in hw. Incomplete cleanup of multi-core shared buffers for some Intel® Processors may allow an authenticated user to enable information disclosure via local access.
Other sources
Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Some processors do not properly clean up and remove temporary or supporting resources after they have been used.
References:
https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/processor-mmio-stale-data-vulnerabilities.html
— Red Hat
Affected Software
Remediation
Information
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-21123?
CVE-2022-21123 is classified as a moderate severity vulnerability.
How do I fix CVE-2022-21123?
To fix CVE-2022-21123, update to the latest kernel versions provided by your distribution, such as 0:3.10.0-1160.76.1.rt56.1220.el7 or equivalent for your system.
Who is affected by CVE-2022-21123?
CVE-2022-21123 affects certain Intel processors and systems running specific kernel versions.
What kind of impact does CVE-2022-21123 have?
CVE-2022-21123 can lead to information disclosure through local access by authenticated users.
What are the affected software versions in CVE-2022-21123?
Affected software versions include specific Red Hat kernels, Debian kernel packages, and Intel microcode versions listed in the vulnerability details.