ucode-intel (SUSE:Linux Enterprise Module for Basesystem 15 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Basesystem 15 SP4 package ucode-intel, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (10)

• CVE-2023-23583 — CVSS 8.8 (high): Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially…
• CVE-2022-21216 — CVSS 7.5 (high): Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a…
• CVE-2022-41804 — CVSS 7.2 (high): Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to…
• CVE-2022-33196 — CVSS 7.2 (high): Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software…
• CVE-2022-40982 — CVSS 6.5 (medium): Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R)…
• CVE-2022-33972 — CVSS 6.1 (medium): Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged…
• CVE-2023-23908 — CVSS 6.0 (medium): Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable…
• CVE-2022-38090 — CVSS 6.0 (medium): Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged…
• CVE-2022-21233 — CVSS 5.5 (medium): Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure…
• CVE-2022-21151 — CVSS 5.5 (medium): Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to…