{"id":"CLEANSTART-2024-LD23111","summary":"Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access","details":"Security vulnerability affects the xen package. Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.","modified":"2026-10-31T16:01:34.004286226Z","published":"2026-10-31T14:24:28.383263Z","upstream":["CVE-2022-21166"],"database_specific":{},"references":[{"type":"ADVISORY","url":"https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-LD23111.json"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-21166"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21166"}],"affected":[{"package":{"name":"xen","ecosystem":"CleanStart","purl":"pkg:apk/cleanstart/xen?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1-r3"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-LD23111.json"}},{"package":{"name":"xen","ecosystem":"CleanStart","purl":"pkg:apk/cleanstart/xen?arch=armv7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1-r3"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-LD23111.json"}},{"package":{"name":"xen","ecosystem":"CleanStart","purl":"pkg:apk/cleanstart/xen?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1-r3"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-LD23111.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}