CVE-2023-22655

kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R)

Published Mar 14, 2024 CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Description
Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-3808-1 intel-microcode security update
EUVD EUVD EUVD-2023-26785 Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.
Ubuntu USN Ubuntu USN USN-6797-1 Intel Microcode vulnerabilities
History
Type Values Removed Values Added
First Time appeared Intel
Intel 3rd Gen Intel Xeon Scalable Processor Family
Intel 4th Gen Intel Xeon Bronze Processors
Intel 4th Gen Intel Xeon Gold Processors
Intel 4th Gen Intel Xeon Platinum Processors
Intel 4th Gen Intel Xeon Scalable Processors
Intel 4th Gen Intel Xeon Scalable Processors With Intel Vran
Intel 4th Gen Intel Xeon Silver Processors
Intel 4th Generation Intel Xeon Gold Processors
Intel 4th Generation Intel Xeon Platinum Processors
Intel xeon Cpu Max Series Processors
Intel xeon D Processor
CPEs cpe:2.3:a:intel:3rd_gen_intel_xeon_scalable_processor_family:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:4th_gen_intel_xeon_bronze_processors:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:4th_gen_intel_xeon_gold_processors:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:4th_gen_intel_xeon_platinum_processors:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:4th_gen_intel_xeon_scalable_processors:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:4th_gen_intel_xeon_scalable_processors_with_intel_vran:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:4th_gen_intel_xeon_silver_processors:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:4th_generation_intel_xeon_gold_processors:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:4th_generation_intel_xeon_platinum_processors:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_cpu_max_series_processors:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_d_processor:*:*:*:*:*:*:*:*
Vendors & Products Intel
Intel 3rd Gen Intel Xeon Scalable Processor Family
Intel 4th Gen Intel Xeon Bronze Processors
Intel 4th Gen Intel Xeon Gold Processors
Intel 4th Gen Intel Xeon Platinum Processors
Intel 4th Gen Intel Xeon Scalable Processors
Intel 4th Gen Intel Xeon Scalable Processors With Intel Vran
Intel 4th Gen Intel Xeon Silver Processors
Intel 4th Generation Intel Xeon Gold Processors
Intel 4th Generation Intel Xeon Platinum Processors
Intel xeon Cpu Max Series Processors
Intel xeon D Processor
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux