Nagaraju Kodalapura Nagabhushana Rao

Name of the Vulnerable Software and Affected Versions: Intel(R) processors with Intel(R) ACTM (affected versions not specified) Description: The issue is related to the exposure of a resource to the wrong sphere in some Intel(R) processors with Intel(R) ACTM, which may allow a privileged user to potentially enable escalation of privilege via local access. This vulnerability is associated with the disclosure of information in an erroneous data area. Exploitation of the vulnerability may allow an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Intel processors 4th Generation and 5th Generation Description: The issue is related to a Time-of-check Time-of-use Race Condition in the Intel Alias Checking Trusted Module (Intel ACTM) component of Intel microcode. This condition arises from synchronization errors when utilizing shared resources. Exploitation of this issue may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations: For Intel processors 4th Generation and 5th Generation, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Intel Xeon Processors (affected versions not specified) **Description** A protection mechanism failure in some Intel Xeon Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access. The issue is related to a failure in the protection mechanism, which could allow an attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Intel Xeon Processors (affected versions not specified) **Description** The issue is related to unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors, which may allow a privileged user to potentially enable escalation of privilege via local access. This could lead to access to confidential data, disruption of data integrity, and denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.