PT-2022-4127

CVE-2022-21233

·

Published

2022-08-09

·

Updated

2026-10-31

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Intel(R) Processors versions 10 through 12 Intel(R) Processors (affected versions not specified)
Description The issue is related to improper isolation of shared resources in some Intel(R) Processors, which may allow a privileged user to potentially enable information disclosure via local access. This is caused by an architectural flaw that allows access to uninitialized data left in the Advanced Programmable Interrupt Controller (APIC) registers after previous operations. The problem affects systems using the Software Guard Extensions (SGX) technology.
Recommendations For Intel(R) Processors versions 10 through 12: Update microcode packages to fix the security vulnerability. For Intel(R) Processors (affected versions not specified): At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
CESA-2022_5937
CLEANSTART-2024-IO24699
DLA-3379-1
MGASA-2022-0304
OESA-2022-1969
OPENSUSE-SU-2022_2960-1
OPENSUSE-SU-2024:12254-1
RHSA-2022:5937
RHSA-2022_5937
RHSA-2022:5939
RHSA-2022_5939
SUSE-SU-2022:2832-1
SUSE-SU-2022_2832-1
SUSE-SU-2022:2833-1
SUSE-SU-2022_2833-1
SUSE-SU-2022:2838-1
SUSE-SU-2022_2838-1
SUSE-SU-2022:2842-1
SUSE-SU-2022_2842-1
SUSE-SU-2022:2960-1
SUSE-SU-2022_2960-1
SUSE-SU-2022:2960-2
USN-5612-1
Found an issue in the description? Have something to add? Feel free to write us 👾