CVE-2022-40982

CVE-2022-40982, also known as "Downfall," is an information exposure vulnerability affecting certain Intel processors, impacting products from vendors like Debian, NetApp, Red Hat, and Xen. This medium-severity flaw (CVSS 6.5) allows an authenticated local user to potentially disclose sensitive information by exploiting microarchitectural state after transient execution in specific vector execution units. While there is no known active exploitation in the wild, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion and media coverage, indicating a high level of awareness.