Description
Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Intel(R) Processors with SGX | See references | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | microcode_ctl | 4:20220809-1.el9 | RHBA-2022:8351 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | microcode_ctl | 2:2.1-53.amzn2023 | ALAS2023-2023-055 |
| Amazon Linux 2 | microcode_ctl | 2:2.1-47.amzn2.0.13 | ALAS2-2022-1842 |
Advisories 4
- RHBA-2022:8351 Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- WID-SEC-2022-0073 AMD Prozessoren: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 16, 2025
- ALAS2023-2023-055 Moderate: microcode_ctl security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 6, 2024
- ALAS2-2022-1842 Moderate: microcode_ctl security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Feb 15, 2024