CVE-2022-21151

Name: CVE-2022-21151
Creator: NVD / NIST
Published: 2022-05-12T17:15:09.93+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 5.5/10EPSS 0.34%

Last modified Jun 17, 2026

CVE-2022-21151 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.

Description

Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1

5.5/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Probability

0.34%

26.1th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Intel	Celeron N6210 Firmware	All versions
Intel	Celeron N4500 Firmware	All versions
Intel	Celeron N4505 Firmware	All versions
Intel	Celeron N5100 Firmware	All versions
Intel	Celeron N5105 Firmware	All versions
Intel	Celeron N6211 Firmware	All versions
Intel	Celeron N4020 Firmware	All versions
Intel	Celeron N4120 Firmware	All versions
Intel	Celeron N3350e Firmware	All versions
Intel	Celeron N4000 Firmware	All versions
Intel	Celeron N4100 Firmware	All versions
Intel	Celeron N3350 Firmware	All versions
Intel	Celeron N3450 Firmware	All versions
Intel	Celeron N3010 Firmware	All versions
Intel	Celeron N3060 Firmware	All versions
Intel	Celeron N3160 Firmware	All versions
Intel	Celeron N3000 Firmware	All versions
Intel	Celeron N3050 Firmware	All versions
Intel	Celeron N3150 Firmware	All versions
Intel	Celeron N2808 Firmware	All versions
Intel	Celeron N2840 Firmware	All versions
Intel	Celeron N2940 Firmware	All versions
Intel	Celeron N2807 Firmware	All versions
Intel	Celeron N2830 Firmware	All versions
Intel	Celeron N2930 Firmware	All versions
Intel	Celeron N2806 Firmware	All versions
Intel	Celeron N2815 Firmware	All versions
Intel	Celeron N2820 Firmware	All versions
Intel	Celeron N2920 Firmware	All versions
Intel	Celeron N2805 Firmware	All versions
Intel	Celeron N2810 Firmware	All versions
Intel	Celeron N2910 Firmware	All versions
Intel	Celeron J6412 Firmware	All versions
Intel	Celeron J6413 Firmware	All versions
Intel	Celeron J4025 Firmware	All versions
Intel	Celeron J4125 Firmware	All versions
Intel	Celeron J3355e Firmware	All versions
Intel	Celeron J3455e Firmware	All versions
Intel	Celeron J4005 Firmware	All versions
Intel	Celeron J4105 Firmware	All versions
Intel	Celeron J3355 Firmware	All versions
Intel	Celeron J3455 Firmware	All versions
Intel	Celeron J3060 Firmware	All versions
Intel	Celeron J3160 Firmware	All versions
Intel	Celeron J1800 Firmware	All versions
Intel	Celeron J1900 Firmware	All versions
Intel	Celeron J1750 Firmware	All versions
Intel	Celeron J1850 Firmware	All versions
Intel	Pentium Silver N6000 Firmware	All versions
Intel	Pentium Silver N6005 Firmware	All versions

Showing 50 of 400 affected configurations. See NVD for the full list.

References

https://security.netapp.com/advisory/ntap-20220826-0003/Third Party Advisory
https://www.debian.org/security/2022/dsa-5178Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.htmlVendor Advisory
https://security.netapp.com/advisory/ntap-20220826-0003/Third Party Advisory
https://www.debian.org/security/2022/dsa-5178Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.htmlVendor Advisory

Timeline

Published: May 12, 2022
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2022-21151?

Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

How severe is CVE-2022-21151?

CVE-2022-21151 has a CVSS score of 5.5/10 (MEDIUM severity). The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.

How do I fix CVE-2022-21151?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-21151?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST