CVE-2022-40982, also known as "Gather Data Sampling" or "Downfall," is a medium-severity vulnerability affecting certain Intel processors. This security issue allows an authenticated user to potentially access sensitive information through a microarchitectural state after transient execution in specific vector execution units. The vulnerability impacts a wide range of systems, including personal computers, cloud servers, and various operating systems. Users are advised to update their firmware and follow recommendations from their system manufacturers to mitigate the risk.

How do I know if I'm affected?

To determine if you're affected by the vulnerability, you should first check if your system uses an Intel processor, as this vulnerability specifically targets certain Intel CPUs. Affected software includes various versions of Red Hat Enterprise Linux, Xen, and Intel microcode up to (excluding) 20230808. Additionally, various Intel hardware models, such as Celeron, Core, and Xeon processors, are impacted. Unfortunately, there are no clear signs of being affected by this vulnerability, but it may allow information disclosure if exploited. No specific Apple product versions have been mentioned in relation to this vulnerability.

What should I do if I'm affected?

If you're affected by the vulnerability, update your system's firmware to the latest version provided by the manufacturer. For Intel SGX customers, update the microcode in platform flash. Check with your system manufacturer for specific instructions and follow their guidance to ensure your system is protected.

Is CVE-2022-40982 in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2022-40982 vulnerability, also known as "Gather Data Sampling" or "Downfall," is not listed in CISA's Known Exploited Vulnerabilities Catalog. This security issue affects certain Intel processors and could potentially allow an authenticated user to disclose information via local access. To mitigate the risk, users should update their system's firmware and follow recommendations from their system manufacturers.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-203 (Observable Discrepancy) and CWE-1342 (Information Exposure through Microarchitectural State after Transient Execution). These vulnerabilities affect certain Intel processors, potentially allowing unauthorized data access.

For more details

CVE-2022-40982, a medium-severity vulnerability affecting certain Intel processors, has wide-ranging implications for various systems and operating systems. Users should update their firmware and follow manufacturer recommendations to mitigate risks. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• Intel Security Center Advisory

• Downfall

• Red Hat Solutions

• AWS Security Bulletins