AlmaLinux 9.2 [TuxCare] Security Update: microcode_ctl (ALMALINUX9.2:CLSA-2026:1770215200)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1770215200 advisory. - Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors may allow a privileged user to potentially enable...

CVE-2025-32086: Improperly Implemented Security Check for Standard

Improperly implemented security check for standard in the DDRIO configuration for some IntelR XeonR 6 Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-26403: Out-of-bounds Write

Out-of-bounds write in the memory subsystem for some IntelR XeonR 6 processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-32004: Improper Input Validation

Improper input validation in the Intel Edger8r Tool for some IntelR SGX SDK may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36293: Improper Access Control

Improper access control in the EDECCSSA user leaf function for some IntelR Processors with IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-34776: Out-of-bounds Write

Out-of-bounds write in some IntelR SGX SDK software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21820: Incorrect Default Permissions

Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-23918: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-43753: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper conditions check in some IntelR Processors with IntelR SGX may allow a privileged user to potentially enable information disclosure via local access...

PT-2024-7302

Name of the Vulnerable Software and Affected Versions: IntelR Processors with IntelR SGX affected versions not specified Description: The issue is related to an improper conditions check in the implementation of Intel's Software Guard eXtensions SGX technology. This could allow a privileged user ...

CVE-2023-43490: Incorrect Calculation

Incorrect calculation in microcode keying mechanism for some IntelR XeonR D Processors with IntelR SGX may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-22655: Protection Mechanism Failure

Protection mechanism failure in some 3rd and 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-32666: On-Chip Debug and Test Interface With Improper Access Control

On-chip debug and test interface with improper access control in some 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-42776: Improper Input Validation

Improper input validation in some IntelR SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access...

CVE-2022-41804: Unauthorized Error Injection Can Degrade Hardware Redundancy

Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in the Crypto API Toolkit for IntelR SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21163: Undefined Security Weakness

Improper access control in the Crypto API Toolkit for IntelR SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-12872

Name of the Vulnerable Software and Affected Versions IntelR SGX SDK affected versions not specified Description The issue is related to an improper conditions check in the IntelR SGX SDK software. This may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-26509: Improper Handling of Exceptional Conditions

Improper conditions check in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-26841: Undefined Security Weakness

Insufficient control flow management for the IntelR SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enable information disclosure via local access...