CVE-2022-38090

Related Files

Ubuntu Security Notice USN-5886-1

Posted Feb 27, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 5886-1 - Erik C. Bjorge discovered that some Intel Atom and Intel Xeon Scalable Processors did not properly implement access controls for out-of-band management. This may allow a privileged network-adjacent user to potentially escalate privileges. Cfir Cohen, Erdem Aktas, Felix Wilhelm, James Forshaw, Josh Eads, Nagaraju Kodalapura Nagabhushana Rao, Przemyslaw Duda, Liron Shacham and Ron Anderson discovered that some Intel Xeon Processors used incorrect default permissions in some memory controller configurations when using Intel Software Guard Extensions. This may allow a privileged local user to potentially escalate privileges.

tags | advisory, local

systems | linux, ubuntu

advisories | CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090

SHA-256 | 5e6f8a9b89dc2296c9a7a52d72eea7ce2c945e6fc8092669cef070563935da15

Download | Favorite | View