PT-2022-3216 · Intel+1 · Intel Sgx+1

Published 2022-03-11 · Updated 2022-12-23 · CVE-2021-33135

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX. This may allow an authenticated user to potentially enable denial of service via local access. The vulnerability is associated with the switching of reserved memory from the Enclave Page Cache (EPC) segment to regular RAM, which can lead to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2022-03915

CVE-2021-33135

OESA-2022-1705

OPENSUSE-SU-2022_3288-1

OPENSUSE-SU-2022_3293-1

OPENSUSE-SU-2022_4617-1

SUSE-SU-2022:3288-1

SUSE-SU-2022:3293-1

SUSE-SU-2022:4617-1

Affected Products

Intel Sgx

Suse

References · 473

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00603.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4617-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1204 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-33135 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30594 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:3293-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33135 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33135 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33135 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1705 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-33135 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3288-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03915 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-1789 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-33135 · Vendor Advisory