CVE-2022-0001: intel atom_p5921b_firmware
Vulnerability summary
CVE-2022-0001 is a medium (CVSS 6.5) vulnerability in intel atom_p5921b_firmware. EPSS estimates a 0.51% chance of exploitation in the next 30 days, higher than 43.4% of scored vulnerabilities.
Not severe (CVSS 6.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 39 · Related 31Timeline
- 11-03-2022PublishedVulnerability first disclosed.
- 05-05-2025Last modifiedVulnerability information updated.
Description
Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- NVDNIST6.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS trend
Probability
0.51%
Chance of exploitation in the next 30 days
Percentile
43%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.51% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Intel129 products
- atom_p5921b_firmwarena
- atom_p5931b_firmwarena
- atom_p5942b_firmwarena
- atom_p5962b_firmwarena
- atom_x6200fe_firmwarena
Ubuntu70 products
- linuxAll versions (No fix recorded) | < 4.4.0-221.254 | < 4.15.0-171.180 | < 5.4.0-104.118
- linux-aws< 4.4.0-1101.106 | < 4.4.0-1137.151 | < 4.15.0-1123.132 | < 5.4.0-1068.72
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
- linux-aws-5.13< 5.13.0-1017.19~20.04.1
Debian1 product
- linux< 5.16.12-1
3 vendors · 200 products · Showing 200 of 530
References
20 links- security.netapp.com/advisory/ntap-20220818-0004/Third Party Advisory
- www.kb.cert.org/vuls/id/155143Third Party Advisory
- www.intel.com/content/…REPORT
Show all 20 references
- community.intel.com/t5/…REPORT
