Not analysed yet
We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 6.5 | Medium | 3.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N | CNA (intel) |
- CISA KEV Not listed.
- EPSS 0.030, the 87th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
Sources
References from the CNA
- www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html
- downfall.page
- aws.amazon.com/security/security-bulletins/AWS-2023-007/
- access.redhat.com/solutions/7027704
- xenbits.xen.org/xsa/advisory-435.html
- lists.debian.org/debian-lts-announce/2023/08/msg00013.html
- security.netapp.com/advisory/ntap-20230811-0001/
- www.debian.org/security/2023/dsa-5474
- www.debian.org/security/2023/dsa-5475
- lists.fedoraproject.org/archives/list/[email protected]/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/
- lists.fedoraproject.org/archives/list/[email protected]/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/
- lists.fedoraproject.org/archives/list/[email protected]/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/
- lists.debian.org/debian-lts-announce/2023/08/msg00026.html
- lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/