- Vulnerability/
- USN-5535-1
USN-5535-1: Intel Microcode vulnerabilities
First published: Thu Jul 28 2022(Updated: )
Joseph Nuzman discovered that some Intel processors did not properly initialise shared resources. A local attacker could use this to obtain sensitive information. (CVE-2021-0145) Mark Ermolov, Dmitry Sklyarov and Maxim Goryachy discovered that some Intel processors did not prevent test and debug logic from being activated at runtime. A local attacker could use this to escalate privileges. (CVE-2021-0146) It was discovered that some Intel processors did not implement sufficient control flow management. A local attacker could use this to cause a denial of service (system crash). (CVE-2021-0127) It was discovered that some Intel processors did not completely perform cleanup actions on multi-core shared buffers. A local attacker could possibly use this to expose sensitive information. (CVE-2022-21123, CVE-2022-21127) It was discovered that some Intel processors did not completely perform cleanup actions on microarchitectural fill buffers. A local attacker could possibly use this to expose sensitive information. (CVE-2022-21125) Alysa Milburn, Jason Brandt, Avishai Redelman and Nir Lavi discovered that some Intel processors improperly optimised security-critical code. A local attacker could possibly use this to expose sensitive information. (CVE-2022-21151) It was discovered that some Intel processors did not properly perform cleanup during specific special register write operations. A local attacker could possibly use this to expose sensitive information. (CVE-2022-21166) It was discovered that some Intel processors did not properly restrict access in some situations. A local attacker could use this to obtain sensitive information. (CVE-2021-33117) Brandon Miller discovered that some Intel processors did not properly restrict access in some situations. A local attacker could use this to obtain sensitive information or a remote attacker could use this to cause a denial of service (system crash). (CVE-2021-33120)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/intel-microcode | <3.20220510.0ubuntu0.16.04.1+esm1 | 3.20220510.0ubuntu0.16.04.1+esm1 |
| =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2021-0145
- https://ubuntu.com/security/CVE-2022-21127
- https://ubuntu.com/security/CVE-2022-21125
- https://ubuntu.com/security/CVE-2021-33117
- https://ubuntu.com/security/CVE-2022-21123
- https://ubuntu.com/security/CVE-2022-21166
- https://ubuntu.com/security/CVE-2021-33120
- https://ubuntu.com/security/CVE-2021-0146
- https://ubuntu.com/security/CVE-2022-21151
- https://ubuntu.com/security/CVE-2021-0127
- https://ubuntu.com/security/notices/USN-5486-1
- https://ubuntu.com/security/notices/USN-5484-1
- https://ubuntu.com/security/notices/USN-5485-1
- https://ubuntu.com/security/notices/USN-5485-2
- https://ubuntu.com/security/notices/USN-5505-1
- https://ubuntu.com/security/notices/USN-5513-1
- https://ubuntu.com/security/notices/USN-5529-1
- https://ubuntu.com/security/notices/USN-5535-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID of USN-5535-1?
The vulnerability ID of USN-5535-1 is CVE-2021-0145.
How can the Intel Microcode vulnerabilities be exploited?
The Intel Microcode vulnerabilities can be exploited by a local attacker to obtain sensitive information.
What is the recommended remedy for the Intel Microcode vulnerabilities?
The recommended remedy for the Intel Microcode vulnerabilities is to update to version 3.20220510.0ubuntu0.16.04.1+esm1 of the intel-microcode package.
Which versions of Ubuntu are affected by the Intel Microcode vulnerabilities?
The Intel Microcode vulnerabilities affect Ubuntu 16.04.
Where can I find more information about the Intel Microcode vulnerabilities?
You can find more information about the Intel Microcode vulnerabilities on the Ubuntu security website.
- agent/severity
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/title
- agent/description
- agent/event
- agent/tags
- agent/trending
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/16.04