CVE-2023-49141Improper Isolation of Shared Resources on System-on-a-Chip (SoC) in Intel-microcode

Severity
7.3HIGHNVD
EPSS
0.1%
top 84.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 14
Latest updateAug 20

Description

Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages1 packages

debiandebian/intel-microcode< intel-microcode 3.20240514.1~deb12u1 (bookworm)

🔴Vulnerability Details

3
OSV
intel-microcode vulnerabilities2024-08-20
OSV
CVE-2023-49141: Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege vi2024-08-14
GHSA
GHSA-27c6-7gh5-wmvg: Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege vi2024-08-14

📋Vendor Advisories

2
Ubuntu
Intel Microcode vulnerabilities2024-08-20
Debian
CVE-2023-49141: intel-microcode - Improper isolation in some Intel(R) Processors stream cache mechanism may allow ...2023