CVE-2022-40982 · cross-distro fix matrix

CVE-2022-40982: Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Affects 8 Linux releases across 11 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2022-40982 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

intel-microcode→ fixed in3.20230808.1~deb11u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y intel-microcode
```
linux→ fixed in5.10.179-5urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y linux
```

Source: Debian Security Tracker

intel-microcode→ fixed in3.20230808.1~deb12u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y intel-microcode
```
linux→ fixed in6.1.38-4urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y linux
```

Source: Debian Security Tracker

intel-microcode→ fixed in3.20230808.1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y intel-microcode
```
linux→ fixed in6.4.4-3urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y linux
```