PT-2022-4127 · Intel+6 · Intel Processors+6

Andreas Kogler + 5 · Published 2022-08-09 · Updated 2025-11-08 · CVE-2022-21233

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) Processors versions 10 through 12 Intel(R) Processors (affected versions not specified)

Description The issue is related to improper isolation of shared resources in some Intel(R) Processors, which may allow a privileged user to potentially enable information disclosure via local access. This is caused by an architectural flaw that allows access to uninitialized data left in the Advanced Programmable Interrupt Controller (APIC) registers after previous operations. The problem affects systems using the Software Guard Extensions (SGX) technology.

Recommendations For Intel(R) Processors versions 10 through 12: Update microcode packages to fix the security vulnerability. For Intel(R) Processors (affected versions not specified): At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2022-04966

CESA-2022_5937

CVE-2022-21233

DLA-3379-1

MGASA-2022-0304

OESA-2022-1969

OPENSUSE-SU-2022_2960-1

OPENSUSE-SU-2024:12254-1

RHSA-2022:5937

RHSA-2022:5939

RHSA-2022_5937

RHSA-2022_5939

SUSE-SU-2022:2832-1

SUSE-SU-2022:2833-1

SUSE-SU-2022:2838-1

SUSE-SU-2022:2842-1

SUSE-SU-2022:2960-1

SUSE-SU-2022:2960-2

SUSE-SU-2022_2832-1

SUSE-SU-2022_2833-1

SUSE-SU-2022_2838-1

SUSE-SU-2022_2842-1

SUSE-SU-2022_2960-1

USN-5612-1

Affected Products

Astra Linux

Centos

Intel Processors

Linuxmint

Red Hat

Suse

Ubuntu

References · 76

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb · Exploit
• 🔥 https://github.com/tr3ee/CVE-2022-23222 · Exploit
• 🔥 https://github.com/randorisec/CVE-2022-34918-LPE-PoC · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-34918 · Exploit
• 🔥 https://github.com/plummm/CVE-2022-27666 · Exploit
• 🔥 https://github.com/theori-io/CVE-2022-32250-exploit · Exploit
• 🔥 https://github.com/0x0000000000-03/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/avboy1337/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/bb33bb/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md · Exploit
• 🔥 https://github.com/Ruia-ruia/CVE-2022-29582-Exploit · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/bluefrostsecurity/CVE-2023-2008 · Exploit