openSUSE: Security Advisory for ucode (SUSE-SU-2022:2960-2)

# SPDX-FileCopyrightText: 2024 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.833767");
  script_version("2025-02-26T05:38:41+0000");
  script_cve_id("CVE-2022-21233");
  script_tag(name:"cvss_base", value:"4.6");
  script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:S/C:C/I:N/A:N");
  script_tag(name:"last_modification", value:"2025-02-26 05:38:41 +0000 (Wed, 26 Feb 2025)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2022-08-24 18:48:19 +0000 (Wed, 24 Aug 2022)");
  script_tag(name:"creation_date", value:"2024-03-04 07:25:36 +0000 (Mon, 04 Mar 2024)");
  script_name("openSUSE: Security Advisory for ucode (SUSE-SU-2022:2960-2)");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2024 Greenbone AG");
  script_family("SuSE Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/opensuse", "ssh/login/rpms", re:"ssh/login/release=openSUSELeapMicro5\.2");

  script_xref(name:"Advisory-ID", value:"SUSE-SU-2022:2960-2");
  script_xref(name:"URL", value:"https://lists.opensuse.org/archives/list/[email protected]/thread/SKAJ7PAB3SJBSFPAUDYHFCK2LN5EP7WD");

  script_tag(name:"summary", value:"The remote host is missing an update for the 'ucode'
  package(s) announced via the SUSE-SU-2022:2960-2 advisory.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"insight", value:"This update for ucode-intel fixes the following issues:
  Updated to Intel CPU Microcode 20220809 release (bsc#1201727):

  - CVE-2022-21233: Fixed an issue where stale data may have been leaked
       from the legacy xAPIC MMIO region, which could be used to compromise an
       SGX enclave (INTEL-SA-00657). See also:
       0657.html
  Other fixes:

  - Update for functional issues. See also:

  - Updated Platforms:
   Processor       Stepping  F-M-S/PI     Old Ver   New Ver
     Products
     :---------------:---------:------------:---------:---------:---------
       SKX-SP          B1        06-55-03/97  0100015d  0100015e  Xeon
     Scalable  SKX-SP          H0/M0/U0  06-55-04/b7  02006d05  02006e05
     Xeon Scalable  SKX-D           M1        06-55-04/b7  02006d05
     02006e05  Xeon D-21xx  ICX-SP          D0        06-6a-06/87
     0d000363  0d000375  Xeon Scalable Gen3  GLK             B0
     06-7a-01/01  0000003a  0000003c  Pentium Silver N/J5xxx, Celeron
     N/J4xxx  GLK-R           R0        06-7a-08/01  0000001e  00000020
     Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120  ICL-U/Y
     D1        06-7e-05/80  000000b0  000000b2  Core Gen10 Mobile
     TGL-R           C0        06-8c-02/c2  00000026  00000028  Core Gen11
     Mobile  TGL-H           R0        06-8d-01/c2  0000003e  00000040
     Core Gen11 Mobile  RKL-S           B0        06-a7-01/02  00000053
     00000054  Core Gen11  ADL             C0        06-97-02/03  0000001f
      00000022  Core Gen12  ADL             C0        06-97-05/03
     0000001f  00000022  Core Gen12  ADL             L0        06-9a-03/80
      0000041c  00000421  Core Gen12  ADL             L0
     06-9a-04/80  0000041c  00000421  Core Gen12  ADL             C0
      06-bf-02/03  0000001f  00000022  Core Gen12  ADL
     C0        06-bf-05/03  0000001f  00000022  Core Gen12

  - -----------------------------------------------------------------
  Special Instructions and Notes:
  Please reboot the system after installing this update.");

  script_tag(name:"affected", value:"'ucode' package(s) on openSUSE Leap Micro 5.2.");

  script_tag(name:"solution", value:"Please install the updated package(s).");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release)
  exit(0);

res = "";
report = "";

if(release == "openSUSELeapMicro5.2") {

  if(!isnull(res = isrpmvuln(pkg:"ucode-intel-20220809", rpm:"ucode-intel-20220809~150200.18.1", rls:"openSUSELeapMicro5.2"))) {
    report += res;
  }


  if(report != "") {
    security_message(data:report);
  } else if(__pkg_match) {
    exit(99);
  }
  exit(0);
}

exit(0);