Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389
https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html
https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html
https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf