Incorrect default permissions in 3rd Generation Intel Xeon Scalable Processors and Intel Xeon D Processors - CVE-2022-33196

Vulnerability identifier: #VU72456

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-33196

CWE-ID: CWE-276

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect default permissions for memory controller configurations for some Intel Xeon processors when using Intel Software Guard Extensions. A local user escalate privileges on the system.

3rd Generation Intel Xeon Scalable Processors
Intel Xeon D Processors
PowerEdge T150
PowerEdge R250
PowerEdge T350
PowerEdge R350
PowerEdge R550
PowerEdge XR12
PowerEdge XR11
PowerEdge R750XS
PowerEdge R650XS
PowerEdge R450
PowerEdge T550
PowerEdge MX750c
PowerEdge C6520
PowerEdge R650
PowerEdge R750XA
PowerEdge R750
HPE Edgeline e920t Server Blade
HPE Edgeline e920d Server Blade
HPE Edgeline e920 Server Blade
HPE ProLiant XL220n Gen10 Plus Server
HPE ProLiant DL360 Gen10 Plus server
HPE ProLiant DL380 Gen10 Plus server
HPE ProLiant DL110 Gen10 Plus Telco server
HPE StoreEasy 1660 Storage
HPE StoreEasy 1860 Storage
HPE ProLiant DX360 Gen10 Plus server
HPE ProLiant DX380 Gen10 Plus server
HPE ProLiant XL290n Gen10 Plus Server
HPE Apollo 2000 Gen10 Plus System
HPE Apollo 4200 Gen10 Plus System
PowerEdge R340
PowerEdge R240
PowerEdge T340
PowerEdge T140
PowerEdge DSS8440
PowerEdge XE7420
PowerEdge R740
PowerEdge R740XD
PowerEdge R640
PowerEdge R940
PowerEdge R540
PowerEdge R440
PowerEdge T440
PowerEdge XR2
PowerEdge R740XD2
PowerEdge R840
PowerEdge R940XA
PowerEdge T640
PowerEdge C6420
PowerEdge M640
PowerEdge M640P
PowerEdge MX740C
PowerEdge MX840C
PowerEdge C4140
PowerEdge XE7440
PowerEdge XE2420
PowerEdge FC640
Amazon Linux AMI
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE CaaS Platform
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Fedora
Isolation Segment
intel-microcode (Ubuntu package)
microcode_ctl
redhat-release-virtualization-host (Red Hat package)
ucode-intel-debugsource
ucode-intel-debuginfo
ucode-intel
PowerFlex Appliance
HPE Synergy 480 Gen10 Plus Compute Module
PowerFlex rack
RecoverPoint for VMs

Install updates from vendor's website.

intel-microcode (Ubuntu package) - addressed in versions Ubuntu Pro, 3.20230214.0ubuntu0.18.04.1, 3.20230214.0ubuntu0.20.04.1, 3.20230214.0ubuntu0.22.04.1, 3.20230214.0ubuntu0.22.10.1
PowerFlex Appliance - update to IC 38.363.02
PowerEdge T150 - update to 1.5.0
PowerEdge R250 - update to 1.5.0
PowerEdge T350 - update to 1.5.0
PowerEdge R350 - update to 1.5.0
PowerEdge R550 - update to 1.9.2
PowerEdge XR12 - update to 1.9.2
PowerEdge XR11 - update to 1.9.2
PowerEdge R750XS - update to 1.9.2
PowerEdge R650XS - update to 1.9.2
PowerEdge R450 - update to 1.9.2
PowerEdge T550 - update to 1.9.2
PowerEdge MX750c - update to 1.9.2
PowerEdge C6520 - update to 1.9.2
PowerEdge R650 - update to 1.9.2
PowerEdge R750XA - update to 1.9.2
PowerEdge R750 - update to 1.9.2
HPE Edgeline e920t Server Blade - update to 1.66_02-02-2023
HPE Edgeline e920d Server Blade - update to 1.66_02-02-2023
HPE Edgeline e920 Server Blade - update to 1.66_02-02-2023
HPE ProLiant XL220n Gen10 Plus Server - update to 1.72_02-02-2023
HPE ProLiant DL360 Gen10 Plus server - update to 1.72_02-02-2023
HPE Synergy 480 Gen10 Plus Compute Module - update to 1.72_02-02-2023
HPE ProLiant DL380 Gen10 Plus server - update to 1.72_02-02-2023
HPE ProLiant DL110 Gen10 Plus Telco server - update to 1.72_02-02-2023
HPE StoreEasy 1660 Storage - update to 1.72_02-02-2023
HPE StoreEasy 1860 Storage - update to 1.72_02-02-2023
HPE ProLiant DX360 Gen10 Plus server - update to 1.72_02-02-2023
HPE ProLiant DX380 Gen10 Plus server - update to 1.72_02-02-2023
HPE ProLiant XL290n Gen10 Plus Server - update to 1.72_02-02-2023
HPE Apollo 2000 Gen10 Plus System - update to 1.72_02-02-2023
HPE Apollo 4200 Gen10 Plus System - update to 1.72_02-02-2023
microcode_ctl - update to 2.1-41
microcode_ctl - addressed in versions 2.1-47.41, 2.1-53
microcode_ctl - addressed in versions 2.1-53.1.fc37, 2.1-55.fc38
PowerEdge R340 - update to 2.12.2
PowerEdge R240 - update to 2.12.2
PowerEdge T340 - update to 2.12.2
PowerEdge T140 - update to 2.12.2
PowerEdge DSS8440 - update to 2.17.1
PowerEdge XE7420 - update to 2.17.1
PowerEdge R740 - update to 2.17.1
PowerEdge R740XD - update to 2.17.1
PowerEdge R640 - update to 2.17.1
PowerEdge R940 - update to 2.17.1
PowerEdge R540 - update to 2.17.1
PowerEdge R440 - update to 2.17.1
PowerEdge T440 - update to 2.17.1
PowerEdge XR2 - update to 2.17.1
PowerEdge R740XD2 - update to 2.17.1
PowerEdge R840 - update to 2.17.1
PowerEdge R940XA - update to 2.17.1
PowerEdge T640 - update to 2.17.1
PowerEdge C6420 - update to 2.17.1
PowerEdge M640 - update to 2.17.1
PowerEdge M640P - update to 2.17.1
PowerEdge MX740C - update to 2.17.1
PowerEdge MX840C - update to 2.17.1
PowerEdge C4140 - update to 2.17.1
PowerEdge XE7440 - update to 2.17.1
PowerEdge XE2420 - update to 2.17.1
PowerEdge FC640 - update to 2.17.1
PowerFlex rack - update to 3.6.3.2
redhat-release-virtualization-host (Red Hat package) - update to 4.5.3-9.el8ev
RecoverPoint for VMs - update to 6.0.SP1.P1
ucode-intel-debugsource - addressed in versions 20230214-3.49.1, 20230214-13.104.1
ucode-intel-debuginfo - addressed in versions 20230214-3.49.1, 20230214-13.104.1
ucode-intel - addressed in versions 20230214-3.49.1, 20230214-13.104.1, 20230214-150100.3.217.1, 20230214-150200.21.1

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html

• Privilege escalation in Intel Xeon Software Guard Extensions
• SUSE update for ucode-intel
• SUSE update for ucode-intel
• SUSE update for ucode-intel
• Multiple vulnerabilities in Dell PowerEdge Server firmware
• Ubuntu update for intel-microcode
• SUSE update for ucode-intel
• Incorrect default permissions in Certain HPE Synergy Servers
• Incorrect default permissions in Certain HPE ProLiant DX Servers
• Incorrect default permissions in Certain HPE StoreEasy Servers
• Incorrect default permissions in Certain HPE ProLiant Servers
• Incorrect default permissions in Certain HPE Edgeline Servers
• Incorrect default permissions in Certain HPE Apollo, XL Servers
• Amazon Linux AMI update for microcode_ctl
• Multiple vulnerabilities in Dell PowerFlex Appliance
• VMware Tanzu Isolation Segment update for Intel Microcode
• Multiple vulnerabilities in Dell PowerFlex Rack
• Fedora 37 update for microcode_ctl
• Fedora 38 update for microcode_ctl
• Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 update for redhat-release-virtualization-host and redhat-virtualization-host
• openEuler 20.03 LTS SP1 update for microcode_ctl
• openEuler 20.03 LTS SP3 update for microcode_ctl
• openEuler 22.03 LTS update for microcode_ctl
• openEuler 22.03 LTS SP1 update for microcode_ctl
• openEuler 22.03 LTS SP2 update for microcode_ctl
• Multiple vulnerabilities in Dell RecoverPoint for Virtual Machines
• Amazon Linux AMI update for microcode_ctl