#VU65221 Processor optimization removal or modification of security-critical code in Intel products - CVE-2022-28693

Vulnerability identifier: #VU65221

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2022-28693

CWE-ID: CWE-1037

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Intel Xeon E Processors
Intel Xeon W Processors
Intel Core X-series Processors
2nd Generation Intel Xeon Scalable Processors
3rd Generation Intel Xeon Scalable Processors
10th Generation Intel Core Processors
Intel Core Processors with Intel Hybrid Technology
11th Generation Intel Core Processors
8th Generation Intel Core Processors
Intel Pentium Gold Processor Series
Intel Celeron Processor 5000 Series
12th Generation Intel Core Processors
Intel Celeron Processors
9th Generation Intel Core Processors

Software vendor:
Intel

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to unprotected alternative channel of return branch target prediction. A local user can gain access to sensitive information.

Install updates from vendor's website.

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00707.html
• https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/return-stack-buffer-underflow.html