CVE-2022-21127: Debian Linux

Medium severity, CVSS 5.5. EPSS: 5.5% chance of exploitation in the next 30 days.

Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only
• Intel Sgx Dcap: before 1.14.100.3 (fixed in 1.14.100.3)
• Intel Sgx Psw: before 2.16.100.3 (fixed in 2.16.100.3); before 2.17.100.3 (fixed in 2.17.100.3)
• Intel Sgx SDK: before 2.16.100.3 (fixed in 2.16.100.3); before 2.17.100.3 (fixed in 2.17.100.3)
• Xen Xen: any version

Published 2022-06-15. Last modified 2026-06-17.