CVE-2023-42667Improper Isolation of Shared Resources on System-on-a-Chip (SoC) in Intel-microcode

Severity
7.3HIGHNVD
EPSS
0.0%
top 86.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 14
Latest updateAug 20

Description

Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages1 packages

debiandebian/intel-microcode< intel-microcode 3.20240813.1~deb12u1 (bookworm)

🔴Vulnerability Details

3
OSV
intel-microcode vulnerabilities2024-08-20
GHSA
GHSA-fc9m-v759-xj58: Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of2024-08-14
OSV
CVE-2023-42667: Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of2024-08-14

📋Vendor Advisories

2
Ubuntu
Intel Microcode vulnerabilities2024-08-20
Debian
CVE-2023-42667: intel-microcode - Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechani...2023