CVE-2022-21216
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and...
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.
- Record
CVE-2022-21216- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
EUVDEUVD-2022-26447
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.
- Record
EUVD-2022-26447- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r59j-cggc-648q
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and...
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.
- Record
GHSA-r59j-cggc-648q- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
NVD
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.
- Record
CVE-2022-21216- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L - CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALPINE-CVE-2022-21216
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.
- Record
ALPINE-CVE-2022-21216- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVBELL-CVE-2022-21216
CVE-2022-21216 does not affect BellSoft software
- Record
BELL-CVE-2022-21216- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 15 moreShow less
OSV
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.
- Record
CVE-2022-21216- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-21216
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.
- Record
DEBIAN-CVE-2022-21216- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVRHEA-2023:4636
Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update
- Record
RHEA-2023:4636- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHEA-2023:6637
Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update
- Record
RHEA-2023:6637- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHEA-2023:7117
Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update
- Record
RHEA-2023:7117- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2023:5209
Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update
- Record
RHSA-2023:5209- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-21216
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.
- Record
UBUNTU-CVE-2022-21216- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
OSVCLSA-2023-1679000846 No score
Fix of 6 CVEs
- SECURITY UPDATE: New microcode data file 2023-02-14
- New microcodes: sig 0x000606c1, pf_mask 0x10, 2022-09-23, rev 0x1000211, size 289792 sig 0x000806f4, pf_mask 0x10, 2022-12-19, rev 0x2c000170, size 600064 sig 0x000806f4, pf_mask 0x87, 2022-12-27, rev 0x2b000181, size 561152 sig 0x000806f5, pf_mask 0x10, 2022-12-19, rev 0x2c000170, size 600064 sig 0x000806f5, pf_mask 0x87, 2022-12-27, rev 0x2b000181, size 561152 sig 0x000806f6, pf_mask 0x10, 2022-12-19, rev 0x2c000170, size 600064 sig 0x000806f6, pf_mask 0x87, 2022-12-27, rev 0x2b000181, size 561152 sig 0x000806f7, pf_mask 0x87, 2022-12-27, rev 0x2b000181, size 561152 sig 0x000806f8, pf_mask 0x10, 2022-12-19, rev 0x2c000170, size 600064 sig 0x000806f8, pf_mask 0x87, 2022-12-27, rev 0x2b000181, size 561152 sig 0x000b0671, pf_mask 0x32, 2022-12-19, rev 0x0112, size 207872 sig 0x000b06a2, pf_mask 0xc0, 2022-12-08, rev 0x410e, size 212992 sig 0x000b06a3, pf_mask 0xc0, 2022-12-08, rev 0x410e, size 212992
- Updated microcodes: sig 0x00050653, pf_mask 0x97, 2022-08-30, rev 0x1000161, size 36864 sig 0x00050654, pf_mask 0xb7, 2022-03-08, rev 0x2006e05, size 44032 sig 0x00050656, pf_mask 0xbf, 2022-08-26, rev 0x4003303, size 37888 sig 0x00050657, pf_mask 0xbf, 2022-08-26, rev 0x5003303, size 37888 sig 0x0005065b, pf_mask 0xbf, 2022-08-26, rev 0x7002503, size 29696 sig 0x000606a6, pf_mask 0x87, 2022-10-09, rev 0xd000389, size 296960 sig 0x000706a1, pf_mask 0x01, 2022-09-16, rev 0x003e, size 75776 sig 0x000706a8, pf_mask 0x01, 2022-09-20, rev 0x0022, size 76800 sig 0x000706e5, pf_mask 0x80, 2022-08-31, rev 0x00b8, size 113664 sig 0x000806a1, pf_mask 0x10, 2022-09-07, rev 0x0032, size 34816 sig 0x000806c1, pf_mask 0x80, 2022-06-28, rev 0x00a6, size 110592 sig 0x000806c2, pf_mask 0xc2, 2022-03-19, rev 0x0028, size 97280 sig 0x000806d1, pf_mask 0xc2, 2022-06-28, rev 0x0042, size 102400 sig 0x000806ec, pf_mask 0x94, 2022-07-31, rev 0x00f4, size 105472 sig 0x00090661, pf_mask 0x01, 2022-07-15, rev 0x0017, size 20480 sig 0x00090672, pf_mask 0x07, 2023-01-04, rev 0x002c, size 219136 sig 0x00090675, pf_mask 0x07, 2023-01-04, rev 0x002c, size 219136 sig 0x000906a3, pf_mask 0x80, 2023-01-11, rev 0x0429, size 218112 sig 0x000906a4, pf_mask 0x80, 2023-01-11, rev 0x0429, size 218112 sig 0x000906c0, pf_mask 0x01, 2022-09-02, rev 0x24000024, size 20480 sig 0x000906ed, pf_mask 0x22, 2022-07-31, rev 0x00f4, size 104448 sig 0x000a0652, pf_mask 0x20, 2022-07-31, rev 0x00f4, size 96256 sig 0x000a0653, pf_mask 0x22, 2022-07-31, rev 0x00f4, size 97280 sig 0x000a0655, pf_mask 0x22, 2022-07-31, rev 0x00f4, size 96256 sig 0x000a0660, pf_mask 0x80, 2022-07-31, rev 0x00f4, size 97280 sig 0x000a0661, pf_mask 0x80, 2022-07-31, rev 0x00f4, size 96256 sig 0x000a0671, pf_mask 0x02, 2022-08-31, rev 0x0057, size 103424 sig 0x000b06f2, pf_mask 0x07, 2023-01-04, rev 0x002c, size 219136 sig 0x000b06f5, pf_mask 0x07, 2023-01-04, rev 0x002c, size 219136
- CVE-2022-38090, INTEL-SA-00767
- CVE-2022-33196, INTEL-SA-00738
- CVE-2022-21216, INTEL-SA-00700
- CVE-2022-21233, INTEL-SA-00657
- CVE-2022-0005, INTEL-SA-00614
- CVE-2022-33972, INTEL-SA-00730
- source: update symlinks to reflect id of the latest release, 20230214
- Record
CLSA-2023-1679000846- Updated
- 2026-11-02
OSVMGASA-2023-0085 No score
Updated microcode packages fix security vulnerabilities
Updated microcode packages fix security vulnerabilities:
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access (CVE-2022-21216 / intel-sa-00700).
Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access (CVE-2022-33196 / intel-sa-00738).
Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable information disclosure via local access (CVE-2022-33972 / intel-sa-00730).
Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access (CVE-2022-38090 / intel-sa-00767).
- Record
MGASA-2023-0085- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12704-1 No score
ucode-intel-20230214-1.1 on GA media
These are all security issues fixed in the ucode-intel-20230214-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12704-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0454-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
Updated to Intel CPU Microcode 20230214 release.
Security issues fixed:
-
CVE-2022-38090: Security updates for INTEL-SA-00767 (bsc#1208275)
-
CVE-2022-33196: Security updates for INTEL-SA-00738 (bsc#1208276)
-
CVE-2022-21216: Security updates for INTEL-SA-00700 (bsc#1208277)
-
New Platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | SPR-SP | E2 | 06-8f-05/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E3 | 06-8f-06/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E4 | 06-8f-07/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E5 | 06-8f-08/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-HBM | B3 | 06-8f-08/10 | | 2c000170 | Xeon Max | RPL-P 6+8 | J0 | 06-ba-02/07 | | 0000410e | Core Gen13 | RPL-H 6+8 | J0 | 06-ba-02/07 | | 0000410e | Core Gen13 | RPL-U 2+8 | Q0 | 06-ba-02/07 | | 0000410e | Core Gen13
-
Updated Platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-97-05/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12 | ADL | L0 | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12 | ADL | L0 | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12 | CLX-SP | B0 | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2 | CPX-SP | A1 | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3 | GLK | B0 | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx | GLK-R | R0 | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-D | B0 | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx | ICL-U/Y | D1 | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile | ICX-SP | D0 | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3 | JSL | A0/A1 | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105 | LKF | B2/B3 | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology | RKL-S | B0 | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11 | RPL-S | S0 | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13 | SKX-SP | B1 | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable
- Record
SUSE-SU-2023:0454-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0455-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
Updated to Intel CPU Microcode 20230214 release.
Security issues fixed:
-
CVE-2022-38090: Security updates for INTEL-SA-00767 (bsc#1208275)
-
CVE-2022-33196: Security updates for INTEL-SA-00738 (bsc#1208276)
-
CVE-2022-21216: Security updates for INTEL-SA-00700 (bsc#1208277)
-
New Platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | SPR-SP | E2 | 06-8f-05/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E3 | 06-8f-06/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E4 | 06-8f-07/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E5 | 06-8f-08/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-HBM | B3 | 06-8f-08/10 | | 2c000170 | Xeon Max | RPL-P 6+8 | J0 | 06-ba-02/07 | | 0000410e | Core Gen13 | RPL-H 6+8 | J0 | 06-ba-02/07 | | 0000410e | Core Gen13 | RPL-U 2+8 | Q0 | 06-ba-02/07 | | 0000410e | Core Gen13
-
Updated Platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-97-05/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12 | ADL | L0 | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12 | ADL | L0 | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12 | CLX-SP | B0 | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2 | CPX-SP | A1 | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3 | GLK | B0 | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx | GLK-R | R0 | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-D | B0 | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx | ICL-U/Y | D1 | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile | ICX-SP | D0 | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3 | JSL | A0/A1 | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105 | LKF | B2/B3 | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology | RKL-S | B0 | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11 | RPL-S | S0 | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13 | SKX-SP | B1 | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable
- Record
SUSE-SU-2023:0455-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0456-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
Updated to Intel CPU Microcode 20230214 release.
Security issues fixed:
-
CVE-2022-38090: Security updates for INTEL-SA-00767 (bsc#1208275)
-
CVE-2022-33196: Security updates for INTEL-SA-00738 (bsc#1208276)
-
CVE-2022-21216: Security updates for INTEL-SA-00700 (bsc#1208277)
-
New Platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | SPR-SP | E2 | 06-8f-05/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E3 | 06-8f-06/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E4 | 06-8f-07/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E5 | 06-8f-08/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-HBM | B3 | 06-8f-08/10 | | 2c000170 | Xeon Max | RPL-P 6+8 | J0 | 06-ba-02/07 | | 0000410e | Core Gen13 | RPL-H 6+8 | J0 | 06-ba-02/07 | | 0000410e | Core Gen13 | RPL-U 2+8 | Q0 | 06-ba-02/07 | | 0000410e | Core Gen13
-
Updated Platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-97-05/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12 | ADL | L0 | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12 | ADL | L0 | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12 | CLX-SP | B0 | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2 | CPX-SP | A1 | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3 | GLK | B0 | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx | GLK-R | R0 | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-D | B0 | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx | ICL-U/Y | D1 | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile | ICX-SP | D0 | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3 | JSL | A0/A1 | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105 | LKF | B2/B3 | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology | RKL-S | B0 | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11 | RPL-S | S0 | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13 | SKX-SP | B1 | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable
- Record
SUSE-SU-2023:0456-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0568-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
Updated to Intel CPU Microcode 20230214 release.
Security issues fixed:
-
CVE-2022-38090: Security updates for INTEL-SA-00767 (bsc#1208275)
-
CVE-2022-33196: Security updates for INTEL-SA-00738 (bsc#1208276)
-
CVE-2022-21216: Security updates for INTEL-SA-00700 (bsc#1208277)
-
New Platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | SPR-SP | E2 | 06-8f-05/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E3 | 06-8f-06/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E4 | 06-8f-07/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E5 | 06-8f-08/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-HBM | B3 | 06-8f-08/10 | | 2c000170 | Xeon Max | RPL-P 6+8 | J0 | 06-ba-02/07 | | 0000410e | Core Gen13 | RPL-H 6+8 | J0 | 06-ba-02/07 | | 0000410e | Core Gen13 | RPL-U 2+8 | Q0 | 06-ba-02/07 | | 0000410e | Core Gen13
-
Updated Platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-97-05/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12 | ADL | L0 | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12 | ADL | L0 | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12 | CLX-SP | B0 | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2 | CPX-SP | A1 | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3 | GLK | B0 | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx | GLK-R | R0 | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-D | B0 | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx | ICL-U/Y | D1 | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile | ICX-SP | D0 | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3 | JSL | A0/A1 | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105 | LKF | B2/B3 | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology | RKL-S | B0 | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11 | RPL-S | S0 | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13 | SKX-SP | B1 | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable
- Record
SUSE-SU-2023:0568-1- Updated
- 2026-11-02
OSVUSN-5886-1 No score
intel-microcode vulnerabilities
Erik C. Bjorge discovered that some Intel(R) Atom and Intel Xeon Scalable Processors did not properly implement access controls for out-of-band management. This may allow a privileged network-adjacent user to potentially escalate privileges. (CVE-2022-21216)
Cfir Cohen, Erdem Aktas, Felix Wilhelm, James Forshaw, Josh Eads, Nagaraju Kodalapura Nagabhushana Rao, Przemyslaw Duda, Liron Shacham and Ron Anderson discovered that some Intel(R) Xeon(R) Processors used incorrect default permissions in some memory controller configurations when using Intel(R) Software Guard Extensions. This may allow a privileged local user to potentially escalate privileges. (CVE-2022-33196)
It was discovered that some 3rd Generation Intel(R) Xeon(R) Scalable Processors did not properly calculate microkey keying. This may allow a privileged local user to potentially disclose information. (CVE-2022-33972)
Joseph Nuzman discovered that some Intel(R) Processors when using Intel(R) Software Guard Extensions did not properly isolate shared resources. This may allow a privileged local user to potentially disclose information. (CVE-2022-38090)
- Record
USN-5886-1- Updated
- 2026-11-02
Affected products
- intel atom c5310 firmware
- intel atom c5315 firmware
- intel atom c5320 firmware
- intel atom c5325 firmware
- intel atom p5322 firmware
- intel atom p5332 firmware
- intel atom p5342 firmware
- intel atom p5352 firmware
- intel atom p5362 firmware
- intel atom p5921b firmware
- intel atom p5931b firmware
- intel atom p5942b firmware
Show 54 moreShow less
- intel atom p5962b firmware
- intel xeon gold 5315y firmware
- intel xeon gold 5317 firmware
- intel xeon gold 5318h firmware
- intel xeon gold 5318n firmware
- intel xeon gold 5318s firmware
- intel xeon gold 5318y firmware
- intel xeon gold 5320 firmware
- intel xeon gold 5320h firmware
- intel xeon gold 5320t firmware
- intel xeon gold 6312u firmware
- intel xeon gold 6314u firmware
- intel xeon gold 6326 firmware
- intel xeon gold 6328h firmware
- intel xeon gold 6328hl firmware
- intel xeon gold 6330 firmware
- intel xeon gold 6330h firmware
- intel xeon gold 6330n firmware
- intel xeon gold 6334 firmware
- intel xeon gold 6336y firmware
- intel xeon gold 6338 firmware
- intel xeon gold 6338n firmware
- intel xeon gold 6338t firmware
- intel xeon gold 6342 firmware
- intel xeon gold 6346 firmware
- intel xeon gold 6348 firmware
- intel xeon gold 6348h firmware
- intel xeon gold 6354 firmware
- intel xeon platinum 8351n firmware
- intel xeon platinum 8352m firmware
- intel xeon platinum 8352s firmware
- intel xeon platinum 8352v firmware
- intel xeon platinum 8352y firmware
- intel xeon platinum 8353h firmware
- intel xeon platinum 8354h firmware
- intel xeon platinum 8356h firmware
- intel xeon platinum 8358 firmware
- intel xeon platinum 8358p firmware
- intel xeon platinum 8360h firmware
- intel xeon platinum 8360hl firmware
- intel xeon platinum 8360y firmware
- intel xeon platinum 8362 firmware
- intel xeon platinum 8368 firmware
- intel xeon platinum 8368q firmware
- intel xeon platinum 8376h firmware
- intel xeon platinum 8376hl firmware
- intel xeon platinum 8380 firmware
- intel xeon platinum 8380h firmware
- intel xeon platinum 8380hl firmware
- intel xeon silver 4309y firmware
- intel xeon silver 4310 firmware
- intel xeon silver 4310t firmware
- intel xeon silver 4314 firmware
- intel xeon silver 4316 firmware
Affected packages
| Package | Affected | Fixed |
|---|---|---|
intel-ucodeAlpine:v3.14 |
before 20230214-r0 | 20230214-r0 |
intel-ucodeAlpine:v3.15 |
before 20230214-r0 | 20230214-r0 |
intel-ucodeAlpine:v3.16 |
before 20230214-r0 | 20230214-r0 |
intel-ucodeAlpine:v3.17 |
before 20230214-r0 | 20230214-r0 |
intel-ucodeAlpine:v3.18 |
before 20230214-r0 | 20230214-r0 |
intel-ucodeAlpine:v3.19 |
before 20230214-r0 | 20230214-r0 |
intel-ucodeAlpine:v3.20 |
before 20230214-r0 | 20230214-r0 |
intel-ucodeAlpine:v3.21 |
before 20230214-r0 | 20230214-r0 |
intel-ucodeAlpine:v3.22 |
before 20230214-r0 | 20230214-r0 |
intel-ucodeAlpine:v3.23 |
before 20230214-r0 | 20230214-r0 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
intel-ucodeAlpine:v3.24 |
before 20230214-r0 | 20230214-r0 |
intel-microcodeTuxCare:Ubuntu:16.04 |
before 3.20230214.0ubuntu0.16.04.1+tuxcare.els1 | 3.20230214.0ubuntu0.16.04.1+tuxcare.els1 |
intel-microcodeDebian:12 |
before 3.20230214.1, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
3.20230214.1 |
intel-microcodeDebian:13 |
before 3.20230214.1, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
3.20230214.1 |
intel-microcodeDebian:14 |
before 3.20230214.1, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
3.20230214.1 |
intel-microcodeDebian:10 |
before 3.20230214.1~deb10u1, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
3.20230214.1~deb10u1 |
microcodeMageia:8 |
before 0.20230214-1.mga8.nonfree | 0.20230214-1.mga8.nonfree |
microcode_ctlRed Hat:enterprise_linux:7::client |
before 2:2.1-73.16.el7_9 | 2:2.1-73.16.el7_9 |
microcode_ctl-debuginfoRed Hat:enterprise_linux:7::client |
before 2:2.1-73.16.el7_9 | 2:2.1-73.16.el7_9 |
microcode_ctlRed Hat:enterprise_linux:7::server |
before 2:2.1-73.16.el7_9 | 2:2.1-73.16.el7_9 |
microcode_ctl-debuginfoRed Hat:enterprise_linux:7::server |
before 2:2.1-73.16.el7_9 | 2:2.1-73.16.el7_9 |
microcode_ctlRed Hat:enterprise_linux:7::workstation |
before 2:2.1-73.16.el7_9 | 2:2.1-73.16.el7_9 |
microcode_ctl-debuginfoRed Hat:enterprise_linux:7::workstation |
before 2:2.1-73.16.el7_9 | 2:2.1-73.16.el7_9 |
microcode_ctlRed Hat:enterprise_linux:9::baseos |
before 4:20230808-2.el9 | 4:20230808-2.el9 |
microcode_ctlRed Hat:enterprise_linux:8::baseos |
before 4:20230808-2.el8 | 4:20230808-2.el8 |
redhat-virtualization-hostRed Hat:rhev_hypervisor:4.4::el8 |
before 0:4.5.3-202309130206_8.6 | 0:4.5.3-202309130206_8.6 |
redhat-virtualization-host-image-updateRed Hat:rhev_hypervisor:4.4::el8 |
before 0:4.5.3-202309130206_8.6 | 0:4.5.3-202309130206_8.6 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 20230214-150100.3.217.1 | 20230214-150100.3.217.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 20230214-150100.3.217.1 | 20230214-150100.3.217.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 20230214-150100.3.217.1 | 20230214-150100.3.217.1 |
ucode-intelSUSE:OpenStack Cloud 9 |
before 20230214-13.104.1 | 20230214-13.104.1 |
ucode-intelSUSE:OpenStack Cloud Crowbar 9 |
before 20230214-13.104.1 | 20230214-13.104.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 20230214-13.104.1 | 20230214-13.104.1 |
ucode-intelSUSE:Linux Enterprise Server 12 SP2-BCL |
before 20230214-13.104.1 | 20230214-13.104.1 |
ucode-intelSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 20230214-13.104.1 | 20230214-13.104.1 |
ucode-intelSUSE:Linux Enterprise Server 12 SP5 |
before 20230214-3.49.1 | 20230214-3.49.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 20230214-3.49.1 | 20230214-3.49.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.3 |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Linux Enterprise Real Time 15 SP3 |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Manager Proxy 4.2 |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Manager Server 4.2 |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.1 |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.2 |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Enterprise Storage 7 |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelSUSE:Enterprise Storage 7.1 |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelopenSUSE:Leap Micro 5.3 |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
ucode-intelopenSUSE:Leap 15.4 |
before 20230214-150200.21.1 | 20230214-150200.21.1 |
intel-microcodeUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2 Show 17 moreShow less3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.13.20191112-0ubuntu0.14.04.23.20191115.1ubuntu0.14.04.13.20191115.1ubuntu0.14.04.23.20200609.0ubuntu0.14.04.03.20200609.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.23.20210608.0ubuntu0.14.04.1+esm1 |
None known |
intel-microcodeUbuntu:Pro:16.04:LTS |
before 3.20230214.0ubuntu0.16.04.1+esm1, plus listed versions 3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1 Show 17 moreShow less3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.23.20210216.0ubuntu0.16.04.13.20210608.0ubuntu0.16.04.1+esm13.20220510.0ubuntu0.16.04.1+esm1 |
3.20230214.0ubuntu0.16.04.1+esm1 |
intel-microcodeUbuntu:18.04:LTS |
before 3.20230214.0ubuntu0.18.04.1, plus listed versions 3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1 Show 17 moreShow less3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.23.20210216.0ubuntu0.18.04.13.20210608.0ubuntu0.18.04.13.20220510.0ubuntu0.18.04.13.20220809.0ubuntu0.18.04.1 |
3.20230214.0ubuntu0.18.04.1 |
intel-microcodeUbuntu:20.04:LTS |
before 3.20230214.0ubuntu0.20.04.1, plus listed versions 3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0 Show 8 moreShow less3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.23.20210216.0ubuntu0.20.04.13.20210608.0ubuntu0.20.04.13.20220510.0ubuntu0.20.04.13.20220809.0ubuntu0.20.04.1 |
3.20230214.0ubuntu0.20.04.1 |
intel-microcodeUbuntu:22.04:LTS |
before 3.20230214.0ubuntu0.22.04.1, plus listed versions 3.20210608.2ubuntu13.20220510.0ubuntu0.22.04.13.20220809.0ubuntu0.22.04.1 |
3.20230214.0ubuntu0.22.04.1 |
ucode-intelopenSUSE:Tumbleweed |
before 20230214-1.1 | 20230214-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-21216 is a high vulnerability (CVSS 7.5) in Intel Atom C5310 Firmware, published February 16, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.54%, the 45th percentile. Fixed in intel-ucode 20230214-r0.
References
intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html
security.netapp.com/advisory/ntap-20230601-0005
nvd.nist.gov/vuln/detail/CVE-2022-21216
github.com/advisories/GHSA-r59j-cggc-648q
security.alpinelinux.org/vuln/CVE-2022-21216
docs.bell-sw.com/security/cves/CVE-2022-21216
Show 54 moreShow less
errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1679000846
security-tracker.debian.org/tracker/CVE-2022-21216
advisories.mageia.org/MGASA-2023-0085.html
bugs.mageia.org/show_bug.cgi?id=31581
access.redhat.com/errata/RHEA-2023:4636
security.access.redhat.com/data/csaf/v2/advisories/2023/rhea-2023_4636.json
bugzilla.redhat.com/show_bug.cgi?id=2171227
cve.org/CVERecord?id=CVE-2022-21216
openssl.org/news/secadv/20230207.txt
suse.com/support/update/announcement/2023/suse-su-20230454-1
bugzilla.suse.com/1208275
ubuntu.com/security/CVE-2022-21216
Left out here: 462 versions. The JSON record has them.