What’s Vulnerable › Vulnerabilities
CVE-2022-41804
- Severity: medium (CVSS 6.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-08-11 · updated 2026-06-17
- Weakness: CWE-1334
Description
Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Affected products
- Debian Linux: 11.0, 12.0
- Fedoraproject Fedora: 38
- Intel Xeon Bronze 3408U Firmware: all versions
- Intel Xeon D-1513N Firmware: all versions
- Intel Xeon D-1518 Firmware: all versions
- Intel Xeon D-1520 Firmware: all versions
- Intel Xeon D-1521 Firmware: all versions
- Intel Xeon D-1523N Firmware: all versions
- Intel Xeon D-1527 Firmware: all versions
- Intel Xeon D-1528 Firmware: all versions
- Intel Xeon D-1529 Firmware: all versions
- Intel Xeon D-1531 Firmware: all versions
- Intel Xeon D-1533N Firmware: all versions
- Intel Xeon D-1537 Firmware: all versions
- Intel Xeon D-1539 Firmware: all versions
- Intel Xeon D-1540 Firmware: all versions
- Intel Xeon D-1541 Firmware: all versions
- Intel Xeon D-1543N Firmware: all versions
- Intel Xeon D-1548 Firmware: all versions
- Intel Xeon D-1553N Firmware: all versions
- Intel Xeon D-1557 Firmware: all versions
- Intel Xeon D-1559 Firmware: all versions
- Intel Xeon D-1567 Firmware: all versions
- Intel Xeon D-1571 Firmware: all versions
- Intel Xeon D-1577 Firmware: all versions
- Intel Xeon D-1602 Firmware: all versions
- Intel Xeon D-1622 Firmware: all versions
- Intel Xeon D-1623N Firmware: all versions
- Intel Xeon D-1627 Firmware: all versions
- Intel Xeon D-1633N Firmware: all versions
References
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html
- https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/
- https://security.netapp.com/advisory/ntap-20230915-0003/
- https://www.debian.org/security/2023/dsa-5474
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html
- https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/
- https://security.netapp.com/advisory/ntap-20230915-0003/
- https://www.debian.org/security/2023/dsa-5474
Get alerted when CVE-2022-41804 or the next vulnerability affects your stack