Advisory Published

USN-6797-1: Intel Microcode vulnerabilities

First published: Wed May 29 2024(Updated: )

It was discovered that some 3rd and 4th Generation Intel® Xeon® Processors did not properly restrict access to certain hardware features when using Intel® SGX or Intel® TDX. This may allow a privileged local user to potentially further escalate their privileges on the system. This issue only affected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2023-22655) It was discovered that some Intel® Atom® Processors did not properly clear register state when performing various operations. A local attacker could use this to obtain sensitive information via a transient execution attack. This issue only affected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2023-28746) It was discovered that some Intel® Processors did not properly clear the state of various hardware structures when switching execution contexts. A local attacker could use this to access privileged information. This issue only affected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2023-38575) It was discovered that some Intel® Processors did not properly enforce bus lock regulator protections. A remote attacker could use this to cause a denial of service. This issue only affected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2023-39368) It was discovered that some Intel® Xeon® D Processors did not properly calculate the SGX base key when using Intel® SGX. A privileged local attacker could use this to obtain sensitive information. This issue only affected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2023-43490) It was discovered that some Intel® Processors did not properly protect against concurrent accesses. A local attacker could use this to obtain sensitive information. (CVE-2023-45733) It was discovered that some Intel® Processors TDX module software did not properly validate input. A privileged local attacker could use this information to potentially further escalate their privileges on the system. (CVE-2023-45745, CVE-2023-47855) It was discovered that some Intel® Core™ Ultra processors did not properly handle particular instruction sequences. A local attacker could use this issue to cause a denial of service. (CVE-2023-46103)

Affected SoftwareAffected VersionHow to fix
All of
ubuntu/intel-microcode<3.20240514.0ubuntu0.24.04.1
3.20240514.0ubuntu0.24.04.1
Ubuntu=24.04
All of
ubuntu/intel-microcode<3.20240514.0ubuntu0.23.10.1
3.20240514.0ubuntu0.23.10.1
Ubuntu=23.10
All of
ubuntu/intel-microcode<3.20240514.0ubuntu0.22.04.1
3.20240514.0ubuntu0.22.04.1
Ubuntu=22.04
All of
ubuntu/intel-microcode<3.20240514.0ubuntu0.20.04.1
3.20240514.0ubuntu0.20.04.1
Ubuntu=20.04
All of
ubuntu/intel-microcode<3.20240514.0ubuntu0.18.04.1+esm1
3.20240514.0ubuntu0.18.04.1+esm1
Ubuntu=18.04
All of
ubuntu/intel-microcode<3.20240514.0ubuntu0.16.04.1+esm1
3.20240514.0ubuntu0.16.04.1+esm1
Ubuntu=16.04

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Child vulnerabilities

(Contains the following vulnerabilities)

Frequently Asked Questions

  • What is the severity of USN-6797-1?

    The severity of USN-6797-1 is considered high as it may allow a privileged local user to escalate their privileges.

  • How do I fix USN-6797-1?

    To fix USN-6797-1, update the intel-microcode package to the latest version specified in the advisory for your Ubuntu version.

  • Which systems are affected by USN-6797-1?

    USN-6797-1 affects multiple versions of Ubuntu, specifically those running intel-microcode prior to the specified remedial versions.

  • Can a non-privileged user exploit USN-6797-1?

    No, USN-6797-1 requires a privileged local user to potentially exploit the vulnerability.

  • Is there a workaround for USN-6797-1?

    There is no official workaround for USN-6797-1; updating the intel-microcode package is recommended.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203