Lucene search
Redhat.comRH:CVE-2022-40982HistoryAug 08, 2023 - 5:20 p.m.
CVE-2022-40982
2023-08-0817:20:33
redhat.com
access.redhat.com
89
intel processors
vulnerability
local attacker
stale data
gather instructions
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS
0.001
Percentile
35.3%
A Gather Data Sampling (GDS) transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction (load from memory) to infer stale data from previously used vector registers on the same physical core.
Mitigation
The vulnerability can be mitigated by installing the CPU microcode package microcode_ctl version 20230808.
Related
ubuntucve
ubuntucve
CVE-2022-40982
2023-08-08 00:00:00
nessus
nessus
Oracle Linux 8 : microcode_ctl (ELSA-2023-12723)
2023-08-15 00:00:00
Debian DLA-3524-1 : linux - LTS security update
2023-08-17 00:00:00
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12782)
2023-09-11 00:00:00
alpinelinux
alpinelinux
CVE-2022-40982
2023-08-11 03:15:14
debian
debian
[SECURITY] [DLA 3524-1] linux security update
2023-08-10 19:41:46
[SECURITY] [DSA 5475-1] linux security update
2023-08-11 07:57:07
[SECURITY] [DLA 3525-1] linux-5.10 security update
2023-08-11 17:21:05
talosblog
talosblog
Recapping the top stories from Black Hat and DEF CON
2023-08-17 18:00:32
oraclelinux
oraclelinux
microcode_ctl security update
2023-08-15 00:00:00
microcode_ctl security update
2023-08-15 00:00:00
Unbreakable Enterprise kernel-container security update
2023-09-11 00:00:00
cvelist
cvelist
CVE-2022-40982
2023-08-11 02:37:05
prion
prion
Information disclosure
2023-08-11 03:15:00
openvas
openvas
Missing Linux Kernel mitigations for 'GDS - Gather Data Sampling' hardware vulnerability (Downfall, INTEL-SA-00828)
2023-08-11 00:00:00
Debian: Security Advisory (DLA-3524-1)
2023-08-18 00:00:00
Debian: Security Advisory (DLA-3525-1)
2023-08-18 00:00:00
cve
cve
CVE-2022-40982
2023-08-11 03:15:14
ics
ics
Siemens SIMATIC IPCs
2023-09-14 12:00:00
f5
f5
K000135795: Downfall Attacks CVE-2022-40982
2023-08-09 00:00:00
vulnrichment
vulnrichment
CVE-2022-40982
2023-08-11 02:37:05
cloudlinux
cloudlinux
microcode_ctl: Fix of CVE-2022-40982
2023-08-30 17:12:48
veracode
veracode
Information Disclosure
2023-08-10 23:12:56
osv
osv
CVE-2022-40982
2023-08-11 03:15:14
linux - security update
2023-08-10 00:00:00
xen-4.17.2_02-1.1 on GA media
2024-06-15 00:00:00
nvd
nvd
CVE-2022-40982
2023-08-11 03:15:14
amazon
amazon
Medium: microcode_ctl
2023-08-03 18:10:00
debiancve
debiancve
CVE-2022-40982
2023-08-11 03:15:14
xen
xen
x86/Intel: Gather Data Sampling
2023-08-08 15:53:00
fedora
fedora
[SECURITY] Fedora 38 Update: xen-4.17.2-1.fc38
2023-08-16 01:22:32
[SECURITY] Fedora 37 Update: xen-4.16.5-1.fc37
2023-08-27 00:50:59
[SECURITY] Fedora 38 Update: microcode_ctl-2.1-55.1.fc38
2023-08-16 01:22:33
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2023-08-01 00:00:00
redhat
redhat
(RHSA-2024:3319) Important: kernel security update
2024-05-23 07:23:18
(RHSA-2023:7423) Important: kernel security update
2023-11-21 14:52:31
(RHSA-2023:7424) Important: kernel-rt security update
2023-11-21 14:52:34
rocky
rocky
microcode_ctl bug fix and enhancement update
2023-09-19 12:10:01
microcode_ctl bug fix and enhancement update
2023-09-19 12:08:46
citrix
citrix
cloudfoundry
cloudfoundry
USN-6286-1: Intel Microcode vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
ubuntu
ubuntu
Intel Microcode vulnerabilities
2023-08-14 00:00:00
Linux kernel (Raspberry Pi) vulnerabilities
2023-09-06 00:00:00
Linux kernel vulnerabilities
2023-08-31 00:00:00
thn
thn
mageia
mageia
Updated microcode packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel-linus packages fix security vulnerabilities
2023-08-23 22:56:41
trellix
trellix
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
hp
hp
Intel 2023.3 IPU – BIOS August 2023 Security Updates
2023-08-08 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2024-01-12 19:36:38
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS
0.001
Percentile
35.3%
Related for RH:CVE-2022-40982