What’s Vulnerable › Vulnerabilities
CVE-2022-26373
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-08-18 · updated 2026-10-14
Description
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
Affected products
- Debian Linux: 10.0
- Intel Celeron 5305U Firmware: all versions
- Intel Celeron 6305 Firmware: all versions
- Intel Celeron 6305E Firmware: all versions
- Intel Celeron 6600He Firmware: all versions
- Intel Celeron 7300 Firmware: all versions
- Intel Celeron 7305 Firmware: all versions
- Intel Celeron G5205U Firmware: all versions
- Intel Celeron G5305U Firmware: all versions
- Intel Celeron G5900 Firmware: all versions
- Intel Celeron G5900T Firmware: all versions
- Intel Celeron G5905 Firmware: all versions
- Intel Celeron G5905T Firmware: all versions
- Intel Celeron G5920 Firmware: all versions
- Intel Celeron G5925 Firmware: all versions
- Intel Celeron G6900 Firmware: all versions
- Intel Celeron G6900T Firmware: all versions
- Intel Core I3-1000G1 Firmware: all versions
- Intel Core I3-1000G4 Firmware: all versions
- Intel Core I3-1005G1 Firmware: all versions
- Intel Core I3-10100 Firmware: all versions
- Intel Core I3-10100F Firmware: all versions
- Intel Core I3-10100T Firmware: all versions
- Intel Core I3-10100Te Firmware: all versions
- Intel Core I3-10105 Firmware: all versions
- Intel Core I3-10105F Firmware: all versions
- Intel Core I3-10105T Firmware: all versions
- Intel Core I3-10110U Firmware: all versions
- Intel Core I3-10300 Firmware: all versions
- Intel Core I3-10300T Firmware: all versions
References
- https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html
- https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
- https://security.netapp.com/advisory/ntap-20221007-0005/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00706.html
- https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html
- https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
- https://security.netapp.com/advisory/ntap-20221007-0005/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00706.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
Get alerted when CVE-2022-26373 or the next vulnerability affects your stack