Lucene search

K
ubuntuUbuntuUSN-6286-1
HistoryAug 14, 2023 - 12:00 a.m.

Intel Microcode vulnerabilities

2023-08-1400:00:00
ubuntu.com
33
ubuntu
intel microcode
vulnerabilities
speculative execution
intel cpus
xeon processors
sgx
tdx
3rd generation
scalable processors
cve-2022-40982
cve-2022-41804
cve-2023-23908

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.2%

Releases

  • Ubuntu 23.04
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • intel-microcode - Processor microcode for Intel CPUs

Details

Daniel Moghimi discovered that some Intel® Processors did not properly clear
microarchitectural state after speculative execution of various instructions. A
local unprivileged user could use this to obtain to sensitive
information. (CVE-2022-40982)

It was discovered that some Intel® Xeon® Processors did not properly
restrict error injection for Intel® SGX or Intel® TDX. A local privileged
user could use this to further escalate their privileges. (CVE-2022-41804)

It was discovered that some 3rd Generation Intel® Xeon® Scalable processors
did not properly restrict access in some situations. A local privileged attacker
could use this to obtain sensitive information. (CVE-2023-23908)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.04noarchintel-microcode< 3.20230808.0ubuntu1UNKNOWN
Ubuntu22.04noarchintel-microcode< 3.20230808.0ubuntu0.22.04.1UNKNOWN
Ubuntu20.04noarchintel-microcode< 3.20230808.0ubuntu0.20.04.1UNKNOWN
Ubuntu18.04noarchintel-microcode< 3.20230808.0ubuntu0.18.04.1+esm1UNKNOWN
Ubuntu18.04noarchintel-microcode< 3.20230214.0ubuntu0.18.04.1UNKNOWN
Ubuntu16.04noarchintel-microcode< 3.20230808.0ubuntu0.16.04.1+esm1UNKNOWN
Ubuntu16.04noarchintel-microcode< 3.20210216.0ubuntu0.16.04.1UNKNOWN