[Bug 2008957] CVE-2021-38562 rt: User enumeration through a timing side-channel attack