https://csrc.nist.gov/pubs/sp/800/145/final https://nvd.nist.gov/vuln/detail/CVE-2022-41040#match-13184203