CVE-2022-0002

Name: CVE-2022-0002
Creator: NVD / NIST
Published: 2022-03-11T18:15:25.373+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 6.5/10EPSS 0.45%

Last modified Jun 17, 2026

CVE-2022-0002 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.. EPSS estimates a 0.45% chance of exploitation in the next 30 days.

Description

Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1

6.5/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS Probability

0.45%

35.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Intel	Atom C3308	All versions
Intel	Atom C3336	All versions
Intel	Atom C3338	All versions
Intel	Atom C3338r	All versions
Intel	Atom C3436l	All versions
Intel	Atom C3508	All versions
Intel	Atom C3538	All versions
Intel	Atom C3558	All versions
Intel	Atom C3558r	All versions
Intel	Atom C3558rc	All versions
Intel	Atom C3708	All versions
Intel	Atom C3750	All versions
Intel	Atom C3758	All versions
Intel	Atom C3758r	All versions
Intel	Atom C3808	All versions
Intel	Atom C3830	All versions
Intel	Atom C3850	All versions
Intel	Atom C3858	All versions
Intel	Atom C3950	All versions
Intel	Atom C3955	All versions
Intel	Atom C3958	All versions
Intel	Atom P5921b	All versions
Intel	Atom P5931b	All versions
Intel	Atom P5942b	All versions
Intel	Atom P5962b	All versions
Intel	Atom X5-A3930	All versions
Intel	Atom X5-A3940	All versions
Intel	Atom X5-A3950	All versions
Intel	Atom X5-A3960	All versions
Intel	Atom X5-E3930	All versions
Intel	Atom X5-E3940	All versions
Intel	Atom X5-Z8300	All versions
Intel	Atom X5-Z8330	All versions
Intel	Atom X5-Z8350	All versions
Intel	Atom X5-Z8500	All versions
Intel	Atom X5-Z8550	All versions
Intel	Atom X6200fe	All versions
Intel	Atom X6211e	All versions
Intel	Atom X6212re	All versions
Intel	Atom X6413e	All versions
Intel	Atom X6425e	All versions
Intel	Atom X6425re	All versions
Intel	Atom X6427fe	All versions
Intel	Atom X7-E3950	All versions
Intel	Atom X7-Z8700	All versions
Intel	Atom X7-Z8750	All versions
Intel	Celeron 5305u	All versions
Intel	Celeron 6305	All versions
Intel	Celeron 6305e	All versions
Intel	Celeron 6600he	All versions

Showing 50 of 504 affected configurations. See NVD for the full list.

References

http://www.openwall.com/lists/oss-security/2022/03/18/2Mailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20220818-0004/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00598.htmlVendor Advisory
https://www.oracle.com/security-alerts/cpujul2022.htmlPatch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/03/18/2Mailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20220818-0004/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00598.htmlVendor Advisory
https://www.oracle.com/security-alerts/cpujul2022.htmlPatch, Third Party Advisory

Timeline

Published: Mar 11, 2022
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2022-0002?

Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

How severe is CVE-2022-0002?

CVE-2022-0002 has a CVSS score of 6.5/10 (MEDIUM severity). The EPSS model estimates a 0.45% probability of exploitation in the next 30 days.

How do I fix CVE-2022-0002?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-0002?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST