What’s Vulnerable › Vulnerabilities

CVE-2022-40982

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-08-11 · updated 2026-06-17
• Weakness: CWE-1342

Description

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Affected products

• Debian Linux: 10.0, 11.0, 12.0
• Intel Celeron 5205U Firmware: all versions
• Intel Celeron 5305U Firmware: all versions
• Intel Celeron G4900 Firmware: all versions
• Intel Celeron G4900T Firmware: all versions
• Intel Celeron G4920 Firmware: all versions
• Intel Celeron G5900 Firmware: all versions
• Intel Celeron G5900T Firmware: all versions
• Intel Celeron G5905 Firmware: all versions
• Intel Celeron G5905T Firmware: all versions
• Intel Celeron G5920 Firmware: all versions
• Intel Celeron G5925 Firmware: all versions
• Intel Core I3-1000G1 Firmware: all versions
• Intel Core I3-1000G4 Firmware: all versions
• Intel Core I3-1005G1 Firmware: all versions
• Intel Core I3-10100 Firmware: all versions
• Intel Core I3-10100F Firmware: all versions
• Intel Core I3-10100T Firmware: all versions
• Intel Core I3-10100Y Firmware: all versions
• Intel Core I3-10105 Firmware: all versions
• Intel Core I3-10105F Firmware: all versions
• Intel Core I3-10105T Firmware: all versions
• Intel Core I3-10110U Firmware: all versions
• Intel Core I3-10110Y Firmware: all versions
• Intel Core I3-10300 Firmware: all versions
• Intel Core I3-10300T Firmware: all versions
• Intel Core I3-10305 Firmware: all versions
• Intel Core I3-10305T Firmware: all versions
• Intel Core I3-10320 Firmware: all versions
• Intel Core I3-10325 Firmware: all versions

References

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html
• https://access.redhat.com/solutions/7027704
• https://aws.amazon.com/security/security-bulletins/AWS-2023-007/
• https://downfall.page
• https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html
• https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/
• https://security.netapp.com/advisory/ntap-20230811-0001/
• https://www.debian.org/security/2023/dsa-5474

Get alerted when CVE-2022-40982 or the next vulnerability affects your stack