CVE-2023-38575

CVE-2023-38575 is a medium-severity information disclosure vulnerability affecting some Intel processors, stemming from non-transparent sharing of return predictor targets between contexts. An authorized local user could exploit this with low attack complexity to potentially disclose sensitive information. While not actively exploited and lacking public exploit code, it has garnered some community discussion and media coverage, including a report of its impact on Linux systems.