PT-2024-2541 · Intel+9 · Intel Xeon Processors+9

Laura Laplante + 2 · Published 2024-03-12 · Updated 2025-03-26 · CVE-2023-22655

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions Intel Xeon Processors (affected versions not specified)

Description A protection mechanism failure in some Intel Xeon Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access. The issue is related to a failure in the protection mechanism, which could allow an attacker to elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

ALSA-2024:9401

ALT-PU-2024-8656

ALT-PU-2024-8668

BDU:2024-02527

CVE-2023-22655

DLA-3808-1

INFSA-2024_9401

MGASA-2024-0103

OESA-2024-1732

OPENSUSE-SU-2024:13769-1

OPENSUSE-SU-2024_1139-1

RHSA-2024:9401

RHSA-2024_9401

RLSA-2024:9401

SUSE-SU-2024:0917-1

SUSE-SU-2024:1139-1

SUSE-SU-2024_0917-1

SUSE-SU-2024_1139-1

SUSE-SU-2025:1032-1

SUSE-SU-2025:20020-1

USN-6797-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Intel Xeon Processors

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 126

• https://osv.dev/vulnerability/SUSE-SU-2025:1032-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-22655 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45745 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-22655 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:9401 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13769-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0103.html · Security Note
• https://bdu.fstec.ru/vul/2024-02527 · Security Note
• https://ubuntu.com/security/CVE-2023-43490 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-38575 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20020-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28746 · Security Note
• https://errata.rockylinux.org/RLSA-2024:9401 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:9401 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 · Vendor Advisory