CVE-2022-40982
hw: Intel: Gather Data Sampling (GDS) side channel vulnerability
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 8, 2023
Updated · October 27, 2026
Description
A Gather Data Sampling (GDS) transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction (load from memory) to infer stale data from previously used vector registers on the same physical core.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
The vulnerability can be mitigated by installing the CPU microcode package microcode_ctl version 20230808.
CVSS / CWE
CVSS 3.1 · 6.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor