DEBIAN-CVE-2023-38575

DEBIAN-CVE-2023-38575 PUBLISHED CVSS 5.5 MEDIUM

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

Risk Scores

CVSS 3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions
Debian:11	intel-microcode	3.20180703.1, *, 3.20210608.2
Debian:12	intel-microcode	, , 0
Debian:14	intel-microcode	3.20180425.1, 0, 0.20080131-1
Debian:13	intel-microcode	0.20090927-1, *, 3.20150107.1

Timeline

Mar 14, 2024 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2023-38575 advisory

Open in Interactive Console →