CVE-2023-22655

Public on 2024-03-14

Modified on 2024-03-18

Description

Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.

Severity

Medium

See what this means

CVSS v3 Base Score

6.1

See breakdown

Affected Packages

Platform	Package	Status
Amazon Linux 1	microcode_ctl	Not Affected
Amazon Linux 2 - Core	microcode_ctl	Not Affected
Amazon Linux 2023	microcode_ctl	Not Affected

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	6.1	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2023-22655 Mitre: CVE-2023-22655