CVE-2022-21123: Debian Linux

Medium severity, CVSS 5.5. EPSS: 6.2% chance of exploitation in the next 30 days.

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only; version 11.0 only
• Fedoraproject Fedora: version 35 only; version 36 only
• Intel Sgx Dcap: before 1.14.100.3 (fixed in 1.14.100.3)
• Intel Sgx Psw: before 2.16.100.3 (fixed in 2.16.100.3); before 2.17.100.3 (fixed in 2.17.100.3)
• Intel Sgx SDK: before 2.16.100.3 (fixed in 2.16.100.3); before 2.17.100.3 (fixed in 2.17.100.3)
• VMware ESXi: version 7.0 only
• Xen Xen: any version

Published 2022-06-15. Last modified 2026-06-17.