Back to the CVE list
CVE-2022-26373

Vulnerability in N/a Intel(R) Processors

CVSS score

5.5

EPSS probability

%0.4

Risk score

0.0

Published

4 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
A patch is available only for some products or versions

Kanıt listesindeki ürün ve sürüm eşleşmesini kontrol edin; bazı varyantlar hâlâ etkileniyor olabilir.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2022-26373 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2022-26373 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1n/aIntel(R) Processors View
2intelxeon platinum 8253 firmware View
3intelxeon platinum 8253 View
4intelxeon platinum 8256 firmware View
5intelxeon platinum 8256 View
6intelxeon platinum 8260 firmware View
7intelxeon platinum 8260 View
8intelxeon platinum 8260l firmware View
9intelxeon platinum 8260l View
10intelxeon platinum 8260m firmware View
11intelxeon platinum 8260m View
12intelxeon platinum 8260y firmware View
13intelxeon platinum 8260y View
14intelxeon platinum 8268 firmware View
15intelxeon platinum 8268 View
16intelxeon platinum 8270 firmware View
17intelxeon platinum 8270 View
18intelxeon platinum 8276 firmware View
19intelxeon platinum 8276 View
20intelxeon platinum 8276l firmware View
21intelxeon platinum 8276l View
22intelxeon platinum 8276m firmware View
23intelxeon platinum 8276m View
24intelxeon platinum 8280 firmware View
25intelxeon platinum 8280 View
26intelxeon platinum 8280l firmware View
27intelxeon platinum 8280l View
28intelxeon platinum 8280m firmware View
29intelxeon platinum 8280m View
30intelxeon platinum 9220 firmware View
31intelxeon platinum 9220 View
32intelxeon platinum 9221 firmware View
33intelxeon platinum 9221 View
34intelxeon platinum 9222 firmware View
35intelxeon platinum 9222 View
36intelxeon platinum 9242 firmware View
37intelxeon platinum 9242 View
38intelxeon platinum 9282 firmware View
39intelxeon platinum 9282 View
40intelxeon gold 5215 firmware View
41intelxeon gold 5215 View
42intelxeon gold 5215l firmware View
43intelxeon gold 5215l View
44intelxeon gold 5215m firmware View
45intelxeon gold 5215m View
46intelxeon gold 5217 firmware View
47intelxeon gold 5217 View
48intelxeon gold 5218 firmware View
49intelxeon gold 5218 View
50intelxeon gold 5218b firmware View
51intelxeon gold 5218b View
52intelxeon gold 5218n firmware View
53intelxeon gold 5218n View
54intelxeon gold 5218r firmware View
55intelxeon gold 5218r View
56intelxeon gold 5218t firmware View
57intelxeon gold 5218t View
58intelxeon gold 5220 firmware View
59intelxeon gold 5220 View
60intelxeon gold 5220r firmware View
61intelxeon gold 5220r View
62intelxeon gold 5220s firmware View
63intelxeon gold 5220s View
64intelxeon gold 5220t firmware View
65intelxeon gold 5220t View
66intelxeon gold 5222 firmware View
67intelxeon gold 5222 View
68intelxeon gold 6208u firmware View
69intelxeon gold 6208u View
70intelxeon gold 6209u firmware View
71intelxeon gold 6209u View
72intelxeon gold 6210u firmware View
73intelxeon gold 6210u View
74intelxeon gold 6212u firmware View
75intelxeon gold 6212u View
76intelxeon gold 6222v firmware View
77intelxeon gold 6222v View
78intelxeon gold 6226 firmware View
79intelxeon gold 6226 View
80intelxeon gold 6226r firmware View
81intelxeon gold 6226r View
82intelxeon gold 6230 firmware View
83intelxeon gold 6230 View
84intelxeon gold 6230n firmware View
85intelxeon gold 6230n View
86intelxeon gold 6230r firmware View
87intelxeon gold 6230r View
88intelxeon gold 6230t firmware View
89intelxeon gold 6230t View
90intelxeon gold 6234 firmware View
91intelxeon gold 6234 View
92intelxeon gold 6238 firmware View
93intelxeon gold 6238 View
94intelxeon gold 6238l firmware View
95intelxeon gold 6238l View
96intelxeon gold 6238m firmware View
97intelxeon gold 6238m View
98intelxeon gold 6238r firmware View
99intelxeon gold 6238r View
100intelxeon gold 6238t firmware View
101intelxeon gold 6238t View
102intelxeon gold 6240 firmware View
103intelxeon gold 6240 View
104intelxeon gold 6240l firmware View
105intelxeon gold 6240l View
106intelxeon gold 6240m firmware View
107intelxeon gold 6240m View
108intelxeon gold 6240r firmware View
109intelxeon gold 6240r View
110intelxeon gold 6240y firmware View
111intelxeon gold 6240y View
112intelxeon gold 6242 firmware View
113intelxeon gold 6242 View
114intelxeon gold 6242r firmware View
115intelxeon gold 6242r View
116intelxeon gold 6244 firmware View
117intelxeon gold 6244 View
118intelxeon gold 6246 firmware View
119intelxeon gold 6246 View
120intelxeon gold 6248 firmware View
121intelxeon gold 6248 View
122intelxeon gold 6258r firmware View
123intelxeon gold 6258r View
124intelxeon gold 6250 firmware View
125intelxeon gold 6250 View
126intelxeon gold 6250l firmware View
127intelxeon gold 6250l View
128intelxeon gold 6252 firmware View
129intelxeon gold 6252 View
130intelxeon gold 6252n firmware View
131intelxeon gold 6252n View
132intelxeon gold 6254 firmware View
133intelxeon gold 6254 View
134intelxeon gold 6256 firmware View
135intelxeon gold 6256 View
136intelxeon gold 6262v firmware View
137intelxeon gold 6262v View
138intelxeon silver 4208 firmware View
139intelxeon silver 4208 View
140intelxeon silver 4209t firmware View
141intelxeon silver 4209t View
142intelxeon silver 4210 firmware View
143intelxeon silver 4210 View
144intelxeon silver 4210r firmware View
145intelxeon silver 4210r View
146intelxeon silver 4210t firmware View
147intelxeon silver 4210t View
148intelxeon silver 4214 firmware View
149intelxeon silver 4214 View
150intelxeon silver 4214c firmware View
151intelxeon silver 4214c View
152intelxeon silver 4214r firmware View
153intelxeon silver 4214r View
154intelxeon silver 4214y firmware View
155intelxeon silver 4214y View
156intelxeon silver 4215 firmware View
157intelxeon silver 4215 View
158intelxeon silver 4215r firmware View
159intelxeon silver 4215r View
160intelxeon silver 4216 firmware View
161intelxeon silver 4216 View
162intelxeon bronze 3204 firmware View
163intelxeon bronze 3204 View
164intelxeon bronze 3206r firmware View
165intelxeon bronze 3206r View
166intelxeon w-3275m firmware View
167intelxeon w-3275m View
168intelxeon w-3275 firmware View
169intelxeon w-3275 View
170intelxeon w-3265m firmware View
171intelxeon w-3265m View
172intelxeon w-3265 firmware View
173intelxeon w-3265 View
174intelxeon w-3245m firmware View
175intelxeon w-3245m View
176intelxeon w-3245 firmware View
177intelxeon w-3245 View
178intelxeon w-3235 firmware View
179intelxeon w-3235 View
180intelxeon w-3225 firmware View
181intelxeon w-3225 View
182intelxeon w-3223 firmware View
183intelxeon w-3223 View
184intelxeon w-2295 firmware View
185intelxeon w-2295 View
186intelxeon w-2275 firmware View
187intelxeon w-2275 View
188intelxeon w-2265 firmware View
189intelxeon w-2265 View
190intelxeon w-2255 firmware View
191intelxeon w-2255 View
192intelxeon w-2245 firmware View
193intelxeon w-2245 View
194intelxeon w-2235 firmware View
195intelxeon w-2235 View
196intelxeon w-2225 firmware View
197intelxeon w-2225 View
198intelxeon w-2223 firmware View
199intelxeon w-2223 View
200intelcore i9-10940x firmware View
Total affected vendors: 2|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Does this CVE affect my Red Hat product?

The results come directly from the Red Hat CSAF VEX product status; they are not estimates.

Fix released

Bu ürün dalı için Red Hat düzeltmesi yayımlanmış.

Red Hat fixes

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
5.5cvss_v3MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NRed Hat
5.5CVSS V31MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NNVD
5.5CVSS V3_1MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE ADP

Patch and Remediation Guide

Solution & Remediation Advisory

Partial patch

18 düzeltme kanıtı bulundu; en az 14 ürün veya sürüm hâlâ etkileniyor ya da inceleniyor.

redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

Will not fix

reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2022-26373 is associated with the following CWEs:

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2022-26373 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00706.htmlvendor-advisory[debian-lts-announce] 20220911 [SECURITY] [DLA 3102-1] linux-5.10 new packagevendor-advisory[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security updatevendor-advisoryhttps://security.netapp.com/advisory/ntap-20221007-0005/vendor-advisoryhttps://cert-portal.siemens.com/productcert/html/ssa-794697.htmlnvdCanonical URLvendor-advisoryRHBZ#2115065vendor-advisoryRHSB-6971358vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2022-26373vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2022-26373vendor-advisory

CVSS Vector Radar Chart

5.5 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityNone

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)None

Kısmi yama

18 düzeltme kanıtı bulundu; en az 14 ürün veya sürüm hâlâ etkileniyor ya da inceleniyor.

Follow the vendor

N
n/a logo
n/a
I
intel logo
intel

Weakness Type (CWE & CAPEC)

CWE-200

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-26373"