Information Disclosure

2022-12-1200:46:56

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

information disclosure

return predictor

local access

sensitive information

software

0.0004 Low

EPSS

Percentile

14.2%

JSON

kernel is vulnerable to Information Disclosure. This vulnerability occurs in some Intel® processors due to return predictor targets being shared non-transparently between contexts. This allows a potential attacker to view and disclose sensitive information through local access.

CPENameOperatorVersion
kerneleq4.9.54__29.el6
kerneleq2.6.32__504.23.4.el6
kerneleq2.6.32__431.53.2.el6
kerneleq4.18.0__193.6.3.el8_2
kerneleq2.6.32__358.11.1.el6
kerneleq3.10.0__1160.25.1.el7
kerneleq2.6.32__71.18.1.el6
kerneleq4.18.0__147.6.el8
kerneleq4.9.124__32.el6
kerneleq3.18.41__20.el6

Name	Operator	Version
kernel	eq	4.9.54__29.el6
kernel	eq	2.6.32__504.23.4.el6
kernel	eq	2.6.32__431.53.2.el6
kernel	eq	4.18.0__193.6.3.el8_2
kernel	eq	2.6.32__358.11.1.el6
kernel	eq	3.10.0__1160.25.1.el7
kernel	eq	2.6.32__71.18.1.el6
kernel	eq	4.18.0__147.6.el8
kernel	eq	4.9.124__32.el6
kernel	eq	3.18.41__20.el6

Rows per page:

1-10 of 8241

References

access.redhat.com/errata/RHSA-2022:7337

access.redhat.com/security/updates/classification/#important

access.redhat.com/solutions/6971358

bugzilla.redhat.com/show_bug.cgi?id=2115065

www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/post-barrier-return-stack-buffer-predictions.html