CVE-2023-22655: Medium severity ubuntu/intel-microcode vulnerability

Q: What is the severity of CVE-2023-22655?

CVE-2023-22655 has a high severity level due to its potential to allow escalation of privilege for privileged users.

Q: How do I fix CVE-2023-22655?

To mitigate CVE-2023-22655, update to the latest versions of the intel-microcode package available for your specific Ubuntu or Debian release.

Q: What platforms are affected by CVE-2023-22655?

CVE-2023-22655 affects 3rd and 4th Generation Intel Xeon Processors utilizing Intel SGX or Intel TDX technologies.

Q: Can local access escalate privileges due to CVE-2023-22655?

Yes, CVE-2023-22655 allows a privileged user with local access to potentially escalate their privileges.

Q: Which versions of intel-microcode are safe from CVE-2023-22655?

Versions of intel-microcode that are updated to at least 3.20240514.*, based on your OS version, are considered safe from CVE-2023-22655.

Published Mar 12, 2024

Updated

Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.

Affected Software

6 affected componentsFixes available

ubuntu/intel-microcode<3.20240514.0ubuntu0.18.04.1+

3.20240514.0ubuntu0.18.04.1+

ubuntu/intel-microcode<3.20240514.0ubuntu0.20.04.1

3.20240514.0ubuntu0.20.04.1

ubuntu/intel-microcode<3.20240514.0ubuntu0.22.04.1

3.20240514.0ubuntu0.22.04.1

ubuntu/intel-microcode<3.20240514.0ubuntu0.23.10.1

3.20240514.0ubuntu0.23.10.1

ubuntu/intel-microcode<3.20240514.0ubuntu0.16.04.1+

3.20240514.0ubuntu0.16.04.1+

debian/intel-microcode<=3.20231114.1~deb11u1, <=3.20231114.1~deb12u1

3.20240514.1~deb11u13.20240514.1~deb12u13.20240813.2

Event History

Mar 12, 2024

CVE Published

via Ubuntu·12:00 AM

Mar 14, 2024

CVE Published

via MITRE·04:45 PM

Data Sourced

via MITRE·04:45 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeakness

Mar 21, 2024

Data Sourced

via Red Hat·01:45 PM

DescriptionSeverityAffected Software

May 29, 2024

Data Sourced

via Launchpad·12:47 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

USN-6797-1

Frequently Asked Questions

What is the severity of CVE-2023-22655?

CVE-2023-22655 has a high severity level due to its potential to allow escalation of privilege for privileged users.

How do I fix CVE-2023-22655?

To mitigate CVE-2023-22655, update to the latest versions of the intel-microcode package available for your specific Ubuntu or Debian release.

What platforms are affected by CVE-2023-22655?

CVE-2023-22655 affects 3rd and 4th Generation Intel Xeon Processors utilizing Intel SGX or Intel TDX technologies.

Can local access escalate privileges due to CVE-2023-22655?

Yes, CVE-2023-22655 allows a privileged user with local access to potentially escalate their privileges.

Which versions of intel-microcode are safe from CVE-2023-22655?

Versions of intel-microcode that are updated to at least 3.20240514.*, based on your OS version, are considered safe from CVE-2023-22655.

CVE-2023-22655: Medium severity ubuntu/intel-microcode vulnerability

Affected Software

Event History

Parent advisories

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2023-22655?

How do I fix CVE-2023-22655?

What platforms are affected by CVE-2023-22655?

Can local access escalate privileges due to CVE-2023-22655?

Which versions of intel-microcode are safe from CVE-2023-22655?

Company

Resources

Contact