USN-6286-1

Dashboard / Vulnerabilities / USN-6286-1

USN-6286-1

Summary: intel-microcode vulnerabilities

Details: Daniel Moghimi discovered that some Intel(R) Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. (CVE-2022-40982) It was discovered that some Intel(R) Xeon(R) Processors did not properly restrict error injection for Intel(R) SGX or Intel(R) TDX. A local privileged user could use this to further escalate their privileges. (CVE-2022-41804) It was discovered that some 3rd Generation Intel(R) Xeon(R) Scalable processors did not properly restrict access in some situations. A local privileged attacker could use this to obtain sensitive information. (CVE-2023-23908)

References: https://ubuntu.com/security/notices/USN-6286-1, https://ubuntu.com/security/CVE-2022-40982, https://ubuntu.com/security/CVE-2022-41804, https://ubuntu.com/security/CVE-2023-23908