Database/Kernel, userspace & hypervisor
Intel CPU (AEPIC Leak): Stale data read from the legacy xAPIC MMIO page - leaks SGX enclave and cross-domain data
CVSS 6.0CVE-2022-21233Kernel, userspace & hypervisorcurated
Impact
Stale data read from the legacy xAPIC MMIO page - leaks SGX enclave and cross-domain data
Who can reach it
Local user; tenant VM guest
What to do
Microcode + reboot. Kills naive SGX-based confidential-compute claims on affected parts
References
Related entries
- Linux kernel (arch/x86/kvm/vmx): The return stack buffer was not refilled on VM exit when the host used IBRS/eIBRS asCVE-2022-49611 · Linux kernel (arch/x86/kvm/vmx)Medium
- AMD CPU (DIV0): Division-by-zero leaves stale quotient data readable across contexts - confidentiality loss on Zen 1CVE-2023-20588 · AMD CPU (DIV0)Medium
- KVM (nested VMX): Missing CR0/CR4 consistency checks in nVMX - L2 guest can break nested-virt assumptions / crash hostCVE-2023-30456 · KVM (nested VMX)Medium
- Linux kernel (drivers/iommu/intel): On device release VT-d could dereference a NULL domain and, separately, leave theCVE-2024-27079 · Linux kernel (drivers/iommu/intel)Medium
- Linux kernel (vsock/virtio): Dangling pointer in vskCVE-2024-50264 · Linux kernel (vsock/virtio)Medium
- Linux kernel (drivers/gpu/drm/scheduler): When one tenant's scheduler entity is killed, its scheduled fences are notCVE-2025-38436 · Linux kernel (drivers/gpu/drm/scheduler)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.