Severity
Medium
Analysis Summary
CVE-2022-29901
Intel Processors could allow a local authenticated attacker to obtain sensitive information, caused by the non-transparent sharing of branch predictor targets between contexts attacks. An attacker could exploit this vulnerability to obtain sensitive information.
CVE-2022-28693
Intel Processors could allow a local authenticated attacker to obtain sensitive information, caused by unprotected alternative channel of return branch target prediction. An attacker could exploit this vulnerability to obtain sensitive information.
Impact
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2022-29901
- CVE-2022-28693
Affected Vendors
Intel
Affected Products
- VMware ESXi 6.5
- VMware ESXi 6.7
- Intel 6th Gen Core Processors
- Intel 7th Gen Core Processors
Remediation
Refer to Intel Security Advisory for patch, upgrade or suggested workaround information.