Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update

Fixed packages 1

Vulnerabilities 4

• Medium 5.5
  CVE-2022-21136

  Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial…

  May 12, 2022
• Medium 5.5
  CVE-2022-21151

  Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an auth…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  May 12, 2022
• Medium 5.5
  CVE-2022-21166

  Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticate…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Low 2.4
  CVE-2022-0005

  Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow …

  May 12, 2022

References

• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_8351.json
• report
  https://access.redhat.com/security/cve/CVE-2022-0005
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2086738
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-0005
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-0005
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00614.html
• report
  https://access.redhat.com/security/cve/CVE-2022-21136
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2086735
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21136
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21136
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00616.html
• report
  https://access.redhat.com/security/cve/CVE-2022-21151
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2086730
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21151
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21151
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html
• report
  https://access.redhat.com/security/cve/CVE-2022-21166
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090241
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21166
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21166
• article
  https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/processor-mmio-stale-data-vulnerabilities.html