UBUNTU-CVE-2022-21151

MEDIUM5.5

Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Published May 12, 2022

Modified 6 months ago

Fix available

Details

Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Affected Packages

intel-microcode

Ubuntu 18.04 LTS

Fixed in:

3.20220510.0ubuntu0.18.04.1

intel-microcode

Ubuntu 20.04 LTS

Fixed in:

3.20220510.0ubuntu0.20.04.1

intel-microcode

Ubuntu 22.04 LTS

Fixed in:

3.20220510.0ubuntu0.22.04.1

intel-microcode

Ubuntu Pro 14.04 LTS

Affected versions:

1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu23.20180108.0+really20170707ubuntu14.04.13.20180108.0~ubuntu14.04.23.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.2+12 more

intel-microcode

Ubuntu Pro 16.04 LTS

Fixed in:

3.20220510.0ubuntu0.16.04.1+esm1

References

REPORT

https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220510

REPORT

https://ubuntu.com/security/CVE-2022-21151

ADVISORY

https://ubuntu.com/security/notices/USN-5486-1

ADVISORY