VDB
ALPINE-CVE-2022-21166
ALPINE-CVE-2022-21166
PUBLISHED
CVSS 5.5 MEDIUM
Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.15 | xen | 4.1.2-r11, 0, 4.9.1-r3 |
| Alpine:v3.23 | xen | 4.5.1-r1, 0, 4.9.1-r3 |
| Alpine:v3.24 | xen | 0 |
| Alpine:v3.19 | xen | 4.1.0-r0, 4.2.0-r5, 4.2.2-r5 |
| Alpine:v3.14 | xen | 4.9.1-r3, 4.9.1-r2, 4.9.1-r1 |
| Alpine:v3.13 | xen | 4.2.2-r0, 0, 4.0.1-r0 |
| Alpine:v3.22 | xen | 4.1.2-r11, 0, 4.0.1-r0 |
| Alpine:v3.17 | xen | 4.13.1-r1, 4.3.1-r1, 4.3.1-r2 |
| Alpine:v3.16 | xen | 4.6.0-r3, 0, 4.0.1-r0 |
| Alpine:v3.18 | xen | 4.9.0-r4, 4.9.0-r3, 4.9.0-r2 |
| Alpine:v3.21 | xen | 4.6.0-r4, 0, 4.0.1-r2 |
| Alpine:v3.20 | xen | 0, 4.9.1-r3, 4.9.1-r2 |
Timeline
- Jun 15, 2022 CVE Published
- Apr 30, 2026 Distribution Patch
- Jun 15, 2026 CVE Updated