Lucene search
Alpine Linux Development TeamALPINE:CVE-2022-40982HistoryAug 11, 2023 - 3:15 a.m.
CVE-2022-40982
2023-08-1103:15:14
Alpine Linux Development Team
security.alpinelinux.org
19
cve-2022-40982
microarchitectural state
vector execution units
authenticated user
information disclosure
local access
unix
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
35.3%
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel® Processors may allow an authenticated user to potentially enable information disclosure via local access.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | intel-ucode | < 20230808-r0 | UNKNOWN |
| Alpine | 3.15-main | noarch | intel-ucode | < 20230808-r0 | UNKNOWN |
| Alpine | 3.16-main | noarch | intel-ucode | < 20230808-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | intel-ucode | < 20230808-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | intel-ucode | < 20230808-r0 | UNKNOWN |
| Alpine | 3.19-main | noarch | intel-ucode | < 20230808-r0 | UNKNOWN |
| Alpine | 3.20-main | noarch | intel-ucode | < 20230808-r0 | UNKNOWN |
Related
oraclelinux
oraclelinux
microcode_ctl security update
2023-08-15 00:00:00
Unbreakable Enterprise kernel-container security update
2023-09-11 00:00:00
microcode_ctl security update
2023-08-15 00:00:00
prion
prion
Information disclosure
2023-08-11 03:15:00
nessus
nessus
Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2023-12785)
2023-09-11 00:00:00
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12782)
2023-09-11 00:00:00
Oracle Linux 8 : microcode_ctl (ELSA-2023-12723)
2023-08-15 00:00:00
openvas
openvas
Missing Linux Kernel mitigations for 'GDS - Gather Data Sampling' hardware vulnerability (Downfall, INTEL-SA-00828)
2023-08-11 00:00:00
Debian: Security Advisory (DLA-3524-1)
2023-08-18 00:00:00
Debian: Security Advisory (DLA-3525-1)
2023-08-18 00:00:00
cve
cve
CVE-2022-40982
2023-08-11 03:15:14
ubuntucve
ubuntucve
CVE-2022-40982
2023-08-08 00:00:00
debian
debian
[SECURITY] [DLA 3524-1] linux security update
2023-08-10 19:41:46
[SECURITY] [DSA 5475-1] linux security update
2023-08-11 07:57:07
[SECURITY] [DLA 3525-1] linux-5.10 security update
2023-08-11 17:21:05
talosblog
talosblog
Recapping the top stories from Black Hat and DEF CON
2023-08-17 18:00:32
cvelist
cvelist
CVE-2022-40982
2023-08-11 02:37:05
ics
ics
Siemens SIMATIC IPCs
2023-09-14 12:00:00
f5
f5
K000135795: Downfall Attacks CVE-2022-40982
2023-08-09 00:00:00
vulnrichment
vulnrichment
CVE-2022-40982
2023-08-11 02:37:05
cloudlinux
cloudlinux
microcode_ctl: Fix of CVE-2022-40982
2023-08-30 17:12:48
veracode
veracode
Information Disclosure
2023-08-10 23:12:56
osv
osv
CVE-2022-40982
2023-08-11 03:15:14
linux - security update
2023-08-10 00:00:00
kernel-devel-6.4.9-1.1 on GA media
2024-06-15 00:00:00
nvd
nvd
CVE-2022-40982
2023-08-11 03:15:14
amazon
amazon
Medium: microcode_ctl
2023-08-03 18:10:00
debiancve
debiancve
CVE-2022-40982
2023-08-11 03:15:14
xen
xen
x86/Intel: Gather Data Sampling
2023-08-08 15:53:00
redhatcve
redhatcve
CVE-2022-40982
2023-08-08 17:20:33
fedora
fedora
[SECURITY] Fedora 38 Update: xen-4.17.2-1.fc38
2023-08-16 01:22:32
[SECURITY] Fedora 37 Update: xen-4.16.5-1.fc37
2023-08-27 00:50:59
[SECURITY] Fedora 38 Update: microcode_ctl-2.1-55.1.fc38
2023-08-16 01:22:33
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2023-08-01 00:00:00
redhat
redhat
(RHSA-2024:3319) Important: kernel security update
2024-05-23 07:23:18
(RHSA-2023:7423) Important: kernel security update
2023-11-21 14:52:31
(RHSA-2023:7424) Important: kernel-rt security update
2023-11-21 14:52:34
cloudfoundry
cloudfoundry
USN-6286-1: Intel Microcode vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
rocky
rocky
microcode_ctl bug fix and enhancement update
2023-09-19 12:08:46
microcode_ctl bug fix and enhancement update
2023-09-19 12:10:01
citrix
citrix
ubuntu
ubuntu
Intel Microcode vulnerabilities
2023-08-14 00:00:00
Linux kernel (Raspberry Pi) vulnerabilities
2023-09-06 00:00:00
Linux kernel vulnerabilities
2023-08-31 00:00:00
thn
thn
mageia
mageia
Updated microcode packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel-linus packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel packages fix security vulnerabilities
2023-08-23 22:56:41
trellix
trellix
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
hp
hp
Intel 2023.3 IPU – BIOS August 2023 Security Updates
2023-08-08 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2024-01-12 19:36:38
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
35.3%
Related for ALPINE:CVE-2022-40982