> For the complete documentation index, see [llms.txt](https://docs.ionos.com/cloud/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ionos.com/cloud/security-safeguards/vulnerability-register/2023/cve-2022-40982.md).

# Advisory on CVE-2022-40982

## Information disclosure in Intel processors

On August 8, 2023, Intel disclosed a vulnerability in its recent computer processor microarchitecture. This vulnerability, known as "Gather Data Sampling (GDS)" or "Downfall", may allow an attacker to obtain sensitive information from a system. This vulnerability is assigned CVE ID as [<mark style="color:blue;">CVE-2022-40982</mark>](https://www.cve.org/CVERecord?id=CVE-2022-40982) and has been given a medium severity by Intel.

## What is the vulnerability?

CVE-2022-40982 is a transient execution side-channel vulnerability that affects Intel® Core processors from the 6th Generation (Skylake) to the 11th Generation (Tiger Lake). It allows an attacker with local access to infer stale data from previously used vector registers on the same physical core. A detailed description can be found in the [<mark style="color:blue;">“Downfall: Exploiting Speculative Data Gathering” paper</mark>](https://downfall.page/media/downfall.pdf).

## What is the risk?

If an attacker can exploit this vulnerability, they could potentially exfiltrate information from different security contexts, such as other virtual machines, or even the host device.

## Impacted IONOS CLOUD products

| Product Ranges   | Product                                                                                                             | Impacted | Mitigated | Patch Status |
| ---------------- | ------------------------------------------------------------------------------------------------------------------- | -------- | --------- | ------------ |
| Compute Services | [<mark style="color:blue;">Dedicated Core Servers</mark>](/cloud/compute-services/compute-engine/dedicated-core.md) | Yes      | Yes       | Done         |
| Compute Services | [<mark style="color:blue;">vCPU Servers</mark>](/cloud/compute-services/compute-engine/vcpu-server.md)              | Yes      | Yes       | Done         |
| Compute Services | [<mark style="color:blue;">Cubes</mark>](/cloud/compute-services/cubes.md)                                          | Yes      | Yes       | Done         |

## What action has IONOS CLOUD taken to mitigate the severity?

<code class="expression">space.vars.ionos\_cloud</code> is committed to the privacy and security of our customers' data. We are aware of this vulnerability and have already initiated the required steps to mitigate this vulnerability. We are also investigating the exposure and risk of this vulnerability for our customer’s products and instances.

We will provide necessary updates as we learn more.

## How can I get help?

If you have further questions or concerns about this vulnerability, contact [<mark style="color:blue;">IONOS CLOUD Support</mark>](https://docs.ionos.com/cloud/support/general-information/contact-information).


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ionos.com/cloud/security-safeguards/vulnerability-register/2023/cve-2022-40982.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.