UBUNTU-CVE-2021-0146

HIGH7.1

Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Published Nov 17, 2021

Modified 6 months ago

Fix available

Details

Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Affected Packages

intel-microcode

Ubuntu 18.04 LTS

Fixed in:

3.20220510.0ubuntu0.18.04.1

intel-microcode

Ubuntu 20.04 LTS

Fixed in:

3.20220510.0ubuntu0.20.04.1

intel-microcode

Ubuntu 22.04 LTS

Fixed in:

3.20220510.0ubuntu0.22.04.1

intel-microcode

Ubuntu Pro 14.04 LTS

Affected versions:

1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu23.20180108.0+really20170707ubuntu14.04.13.20180108.0~ubuntu14.04.23.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.2+12 more

intel-microcode

Ubuntu Pro 16.04 LTS

Fixed in:

3.20220510.0ubuntu0.16.04.1+esm1

References

REPORT

https://security.netapp.com/advisory/ntap-20211210-0006/

REPORT

https://ubuntu.com/security/CVE-2021-0146

ADVISORY

https://ubuntu.com/security/notices/USN-5486-1

ADVISORY