CVE-2022-41804

Aliases:RHBA-2023:5620RHEA-2023:4995RHEA-2023:4998DEBIAN-CVE-2022-41804ALPINE-CVE-2022-41804
Advisory lineage Upstream: 0 Downstream: 16
Modified
Published: 11 Aug 2023, 02:37
Last modified:13 Feb 2025, 16:33

Vulnerability Summary

Overall Risk (default)
medium
29/100
CVSS Score
7.2 HIGH
v3.1 (cve.org)
EPSS Score
0.27% LOW
0% probability +0.26%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

11 Aug 2023, 02:37
Published
Vulnerability first disclosed
13 Feb 2025, 16:33
Last Modified
Vulnerability information updated

Description

Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS Metrics

  • v3.1•HIGH•Score: 7.2CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:H
  • v3.1•MEDIUM•Score: 6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.27%• Percentile: 20%

Techniques & Countermeasures

  • CWE-1334•Unauthorized Error Injection Can Degrade Hardware Redundancy

    An unauthorized agent can inject errors into a redundant block to deprive the system of redundancy or put the system in a degraded operating mode.

Affected Systems

  • alpine•intel-ucode

    < 20230808-r0 | < 20230808-r0 | < 20230808-r0 | < 20230808-r0 | < 20230808-r0 | < 20230808-r0 | < 20230808-r0 | < 20230808-r0 | < 20230808-r0 | < 20230808-r0

  • debian•intel-microcode

    < 3.20230808.1~deb11u1 | < 3.20230808.1~deb12u1 | < 3.20230808.1 | < 3.20230808.1

  • debian•debian_linux

    11.0 | 12.0

  • fedoraproject•fedora

    38

  • intel•xeon_bronze_3408u_firmware

    na

  • intel•xeon_d-1513n_firmware

    na

  • intel•xeon_d-1518_firmware

    na

  • intel•xeon_d-1520_firmware

    na

  • intel•xeon_d-1521_firmware

    na

  • intel•xeon_d-1523n_firmware

    na

  • intel•xeon_d-1527_firmware

    na

  • intel•xeon_d-1528_firmware

    na

  • intel•xeon_d-1529_firmware

    na

  • intel•xeon_d-1531_firmware

    na

  • intel•xeon_d-1533n_firmware

    na

  • intel•xeon_d-1537_firmware

    na

  • intel•xeon_d-1539_firmware

    na

  • intel•xeon_d-1540_firmware

    na

  • intel•xeon_d-1541_firmware

    na

  • intel•xeon_d-1543n_firmware

    na

  • intel•xeon_d-1548_firmware

    na

  • intel•xeon_d-1553n_firmware

    na

  • intel•xeon_d-1557_firmware

    na

  • intel•xeon_d-1559_firmware

    na

  • intel•xeon_d-1567_firmware

    na

  • intel•xeon_d-1571_firmware

    na

  • intel•xeon_d-1577_firmware

    na

  • intel•xeon_d-1602_firmware

    na

  • intel•xeon_d-1622_firmware

    na

  • intel•xeon_d-1623n_firmware

    na

  • intel•xeon_d-1627_firmware

    na

  • intel•xeon_d-1633n_firmware

    na

  • intel•xeon_d-1637_firmware

    na

  • intel•xeon_d-1649n_firmware

    na

  • intel•xeon_d-1653n_firmware

    na

  • intel•xeon_d-1702_firmware

    na

  • intel•xeon_d-1712tr_firmware

    na

  • intel•xeon_d-1713nt_firmware

    na

  • intel•xeon_d-1713nte_firmware

    na

  • intel•xeon_d-1714_firmware

    na

  • intel•xeon_d-1715ter_firmware

    na

  • intel•xeon_d-1718t_firmware

    na

  • intel•xeon_d-1722ne_firmware

    na

  • intel•xeon_d-1726_firmware

    na

  • intel•xeon_d-1732te_firmware

    na

  • intel•xeon_d-1733nt_firmware

    na

  • intel•xeon_d-1734nt_firmware

    na

  • intel•xeon_d-1735tr_firmware

    na

  • intel•xeon_d-1736_firmware

    na

  • intel•xeon_d-1736nt_firmware

    na

Showing first 50 affected entries in server-rendered view.

References (19)