CVE-2022-29901

CVE-2022-29901 : Intel microprocessor generations 6–8 are affected by a Spectre variant that can bypass the kernel retpoline mitigation to leak arbitrary data. An unprivileged local attacker can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitec...

CVE-2022-0004

CVE-2022-0004 concerns Intel® Boot Guard and Intel® TXT. The issue arises from hardware debug modes and a processor INIT setting that allow an unauthenticated user to potentially bypass protections and escalate privileges via physical access. Intel lists affected generations (10th–12th Gen Core, ...

CVE-2022-0005

CVE-2022-0005 concerns a potential information disclosure via the JTAG interface on Intel SGX-enabled CPUs. The provided documents confirm a physical-access vulnerability affecting SGX-enabled processors, with related Nessus/ALAS advisories listing CVE-2022-0005 alongside CVEs 2022-21131, 2022-21...

CVE-2022-21180

CVE-2022-21180 is a Linux kernel vulnerability described as improper input validation that could allow an authenticated local user to cause a denial of service. Connected advisories (e.g., SUSE-SU-2022:2111-1 and SUSE-SU-2022:2116-1) reference this CVE among a set of kernel fixes and note that mi...

CVE-2022-26047

CVE-2022-26047 affects Intel® PROSet/Wireless WiFi firmware prior to 22.140, Killer™ WiFi firmware prior to 3.1122.3158, and the associated UEFI 2.2.14.22176.2. The root cause is improper input validation in certain Intel PROSet/Wireless WiFi, Intel vPro® CSME WiFi, and Killer™ WiFi components, w...