Debian: CVE-2022-33196: intel-microcode -- security update

Debian: CVE-2022-33196: intel-microcode -- security update

Severity

7

CVSS

(AV:L/AC:L/Au:M/C:C/I:C/A:C)

Published

02/16/2023

Created

04/04/2023

Added

04/03/2023

Modified

01/28/2025

Description

Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access.

Solution(s)

• debian-upgrade-intel-microcode

References

• https://attackerkb.com/topics/cve-2022-33196
• CVE - 2022-33196
• DLA-3379-1