CVE-2022-21125: Medium severity XEN Xen vulnerability
A flaw was found in hw. Incomplete cleanup of microarchitectural fill buffers on some Intel® Processors may allow an authenticated user to enable information disclosure via local access.
Other sources
Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Some processors do not properly clean up and remove temporary or supporting resources after they have been used.
References:
https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/processor-mmio-stale-data-vulnerabilities.html
— Red Hat
Affected Software
Remediation
Information
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-21125?
The severity of CVE-2022-21125 is considered moderate due to its potential for information disclosure.
How do I fix CVE-2022-21125?
To fix CVE-2022-21125, update to the appropriate patched kernel version as specified in the remediation details.
Which systems are affected by CVE-2022-21125?
CVE-2022-21125 affects certain Intel® Processors and various Linux kernel versions across different distributions.
What is the impact of CVE-2022-21125?
The impact of CVE-2022-21125 includes potential information disclosure to authenticated users via local access.
Can CVE-2022-21125 be exploited remotely?
No, CVE-2022-21125 requires local access to the system for exploitation.