Summary
Pietro Borrello, Andreas Kogler, Martin Schwarzl, Daniel Gruss, Michael
Schwarz and Moritz Lipp discovered that some Intel processors did not
properly clear data between subsequent xAPIC MMIO reads. This could allow a
local attacker to compromise SGX enclaves.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | intel-microcode | 3.20220809.0ubuntu0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | intel-microcode | 3.20220809.0ubuntu0.20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | intel-microcode | 3.20220809.0ubuntu0.22.04.1 |
Vulnerabilities 1
-
Medium 5.5
Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable in…
References
-
report
https://ubuntu.com/security/CVE-2022-21233