CVE-2023-38575

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

Scoring

Severity

MEDIUM

CVSS base score

5.5

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS probability

0.03%

CWE

CWE-1303

Published

2024-03-14

Last modified

2026-03-13

Affected products

• n/a Intel(R) Processors

Weakness type

• CWE-1303

Related vulnerabilities

• CVE-2023-1998 — Spectre v2 SMT mitigations problem in Linux kernel
• CVE-2023-40540 — Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user t

Markdown version · Browse all CVEs