Log in Start free

Vulnerability · Published Aug 11, 2023 · Assigned by intel

CVE-2022-41804

High 7.2

In plain English

A high-severity security flaw in Intel(R) Xeon(R) Processors. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.2High
Exploit odds (30 days)0.3%top 80.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20intel-ucode20230808-r0ALPINE-CVE-2022-41804
Alpine:v3.21intel-ucode20230808-r0ALPINE-CVE-2022-41804
Alpine:v3.22intel-ucode20230808-r0ALPINE-CVE-2022-41804
Alpine:v3.23intel-ucode20230808-r0ALPINE-CVE-2022-41804
Alpine:v3.24intel-ucode20230808-r0ALPINE-CVE-2022-41804
Debian:12intel-microcode3.20230808.1~deb12u1DSA-5474-1
Debian:12intel-microcode3.20230808.1~deb12u1DEBIAN-CVE-2022-41804
Debian:13intel-microcode3.20230808.1DEBIAN-CVE-2022-41804
Debian:14intel-microcode3.20230808.1DEBIAN-CVE-2022-41804
Ubuntu:22.04:LTSintel-microcode3.20230808.0ubuntu0.22.04.1USN-6286-1
Ubuntu:22.04:LTSintel-microcode3.20230808.0ubuntu0.22.04.1UBUNTU-CVE-2022-41804
Ubuntu:24.04:LTSintel-microcode3.20230808.1UBUNTU-CVE-2022-41804

Affected products (as reported)

VendorProductVersions
n/a Intel(R) Xeon(R) Processors See references

Weakness: CWE-1334 · Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:H

References