{"id":"CVE-2021-0146","aliases":["ALPINE-CVE-2021-0146","BELL-CVE-2021-0146","CLSA-2022-1659636455","EUVD-2021-2765","GHSA-pqgg-8w8h-w2qq","MGASA-2022-0064","OESA-2022-1773","SUSE-SU-2022:0502-1","SUSE-SU-2022:0541-1","SUSE-SU-2022:0574-1","SUSE-SU-2022:0575-1","SUSE-SU-2022:0576-1","UBUNTU-CVE-2021-0146","USN-5486-1","USN-5535-1","openSUSE-SU-2022:0574-1","openSUSE-SU-2024:11840-1"],"status":"published","title":"Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which...","description":"Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00438,"percentile":0.38313,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-269"],"published":"2021-11-17T19:25:13Z","modified":"2026-11-03T06:32:26Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"intel-ucode","fixed_in":["20220207-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"intel-ucode","fixed_in":["20220207-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"intel-ucode","fixed_in":["20220207-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"intel-ucode","fixed_in":["20220207-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"intel-ucode","fixed_in":["20220207-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"intel-ucode","fixed_in":["20220207-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"intel-ucode","fixed_in":["20220207-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"intel-ucode","fixed_in":["20220207-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"intel-ucode","fixed_in":["20220207-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"intel-ucode","fixed_in":["20220207-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"intel-ucode","fixed_in":["20220207-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"intel-ucode","fixed_in":["20220207-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"intel-ucode","fixed_in":["20220207-r0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"intel-microcode","fixed_in":["3.20220510.0ubuntu0.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"intel-microcode","fixed_in":["3.20220510.0ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"intel-microcode","fixed_in":["3.20220510.0ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"intel-microcode","fixed_in":["3.20220510.0ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.16.04.1+tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:8","package":"microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20220207-1.mga8.nonfree"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1-36.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-3.70.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-3.70.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-3.70.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-3.206.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-3.206.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-3.206.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-3.206.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-3.206.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-3.206.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-13.93.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-13.93.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-13.93.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-13.93.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-13.93.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-13.93.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-13.93.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-13.93.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-13.93.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-13.93.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-13.93.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-3.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-3.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.20130906.1ubuntu2","1.20130906.1ubuntu3","2.20140122.1","2.20140430.1ubuntu1","2.20140624-t-1ubuntu2","3.20180108.0~ubuntu14.04.2","3.20180108.0+really20170707ubuntu14.04.1","3.20180312.0~ubuntu14.04.1","3.20180425.1~ubuntu0.14.04.1","3.20180425.1~ubuntu0.14.04.2","3.20180807a.0ubuntu0.14.04.1","3.20190514.0ubuntu0.14.04.1","3.20190514.0ubuntu0.14.04.2","3.20190618.0ubuntu0.14.04.1","3.20191112-0ubuntu0.14.04.2","3.20191115.1ubuntu0.14.04.1","3.20191115.1ubuntu0.14.04.2","3.20200609.0ubuntu0.14.04.0","3.20200609.0ubuntu0.14.04.1","3.20201110.0ubuntu0.14.04.1","3.20201110.0ubuntu0.14.04.2","3.20210608.0ubuntu0.14.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.16.04.1+esm1"}]}],"versions":["3.20150121.1","3.20151106.1","3.20170707.1~ubuntu16.04.0","3.20180108.0~ubuntu16.04.2","3.20180108.0+really20170707ubuntu16.04.1","3.20180312.0~ubuntu16.04.1","3.20180425.1~ubuntu0.16.04.1","3.20180425.1~ubuntu0.16.04.2","3.20180807a.0ubuntu0.16.04.1","3.20190514.0ubuntu0.16.04.1","3.20190514.0ubuntu0.16.04.2","3.20190618.0ubuntu0.16.04.1","3.20191112-0ubuntu0.16.04.2","3.20191115.1ubuntu0.16.04.1","3.20191115.1ubuntu0.16.04.2","3.20200609.0ubuntu0.16.04.0","3.20200609.0ubuntu0.16.04.1","3.20201110.0ubuntu0.16.04.1","3.20201110.0ubuntu0.16.04.2","3.20210216.0ubuntu0.16.04.1","3.20210608.0ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.18.04.1"}]}],"versions":["3.20170707.1","3.20171117.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.0~ubuntu18.04.1","3.20180425.1~ubuntu0.18.04.1","3.20180425.1~ubuntu0.18.04.2","3.20180807a.0ubuntu0.18.04.1","3.20190514.0ubuntu0.18.04.2","3.20190514.0ubuntu0.18.04.3","3.20190618.0ubuntu0.18.04.1","3.20191112-0ubuntu0.18.04.2","3.20191115.1ubuntu0.18.04.1","3.20191115.1ubuntu0.18.04.2","3.20200609.0ubuntu0.18.04.0","3.20200609.0ubuntu0.18.04.1","3.20201110.0ubuntu0.18.04.1","3.20201110.0ubuntu0.18.04.2","3.20210216.0ubuntu0.18.04.1","3.20210608.0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.20.04.1"}]}],"versions":["3.20190918.1ubuntu1","3.20191115.1ubuntu1","3.20191115.1ubuntu2","3.20191115.1ubuntu3","3.20200609.0ubuntu0.20.04.0","3.20200609.0ubuntu0.20.04.1","3.20200609.0ubuntu0.20.04.2","3.20201110.0ubuntu0.20.04.1","3.20201110.0ubuntu0.20.04.2","3.20210216.0ubuntu0.20.04.1","3.20210608.0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.22.04.1"}]}],"versions":["3.20210608.2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.18.04.1"}]}],"versions":["3.20170707.1","3.20171117.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.0~ubuntu18.04.1","3.20180425.1~ubuntu0.18.04.1","3.20180425.1~ubuntu0.18.04.2","3.20180807a.0ubuntu0.18.04.1","3.20190514.0ubuntu0.18.04.2","3.20190514.0ubuntu0.18.04.3","3.20190618.0ubuntu0.18.04.1","3.20191112-0ubuntu0.18.04.2","3.20191115.1ubuntu0.18.04.1","3.20191115.1ubuntu0.18.04.2","3.20200609.0ubuntu0.18.04.0","3.20200609.0ubuntu0.18.04.1","3.20201110.0ubuntu0.18.04.1","3.20201110.0ubuntu0.18.04.2","3.20210216.0ubuntu0.18.04.1","3.20210608.0ubuntu0.18.04.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.20.04.1"}]}],"versions":["3.20190918.1ubuntu1","3.20191115.1ubuntu1","3.20191115.1ubuntu2","3.20191115.1ubuntu3","3.20200609.0ubuntu0.20.04.0","3.20200609.0ubuntu0.20.04.1","3.20200609.0ubuntu0.20.04.2","3.20201110.0ubuntu0.20.04.1","3.20201110.0ubuntu0.20.04.2","3.20210216.0ubuntu0.20.04.1","3.20210608.0ubuntu0.20.04.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.22.04.1"}]}],"versions":["3.20210608.2ubuntu1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.16.04.1+esm1"}]}],"versions":["3.20150121.1","3.20151106.1","3.20170707.1~ubuntu16.04.0","3.20180108.0~ubuntu16.04.2","3.20180108.0+really20170707ubuntu16.04.1","3.20180312.0~ubuntu16.04.1","3.20180425.1~ubuntu0.16.04.1","3.20180425.1~ubuntu0.16.04.2","3.20180807a.0ubuntu0.16.04.1","3.20190514.0ubuntu0.16.04.1","3.20190514.0ubuntu0.16.04.2","3.20190618.0ubuntu0.16.04.1","3.20191112-0ubuntu0.16.04.2","3.20191115.1ubuntu0.16.04.1","3.20191115.1ubuntu0.16.04.2","3.20200609.0ubuntu0.16.04.0","3.20200609.0ubuntu0.16.04.1","3.20201110.0ubuntu0.16.04.1","3.20201110.0ubuntu0.16.04.2","3.20210216.0ubuntu0.16.04.1","3.20210608.0ubuntu0.16.04.1+esm1"],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220207-1.1"}]}],"bundled":4}],"products":[{"vendor":"intel","product":"atom_c3000_firmware"},{"vendor":"intel","product":"atom_x5-e3930_firmware"},{"vendor":"intel","product":"atom_x5-e3940_firmware"},{"vendor":"intel","product":"atom_x7-e3950_firmware"},{"vendor":"intel","product":"celeron_j1750_firmware"},{"vendor":"intel","product":"celeron_j1800_firmware"},{"vendor":"intel","product":"celeron_j1850_firmware"},{"vendor":"intel","product":"celeron_j1900_firmware"},{"vendor":"intel","product":"celeron_j3060_firmware"},{"vendor":"intel","product":"celeron_j3160_firmware"},{"vendor":"intel","product":"celeron_j3355_firmware"},{"vendor":"intel","product":"celeron_j3355e_firmware"},{"vendor":"intel","product":"celeron_j3455_firmware"},{"vendor":"intel","product":"celeron_j3455e_firmware"},{"vendor":"intel","product":"celeron_j4005_firmware"},{"vendor":"intel","product":"celeron_j4025_firmware"},{"vendor":"intel","product":"celeron_j4105_firmware"},{"vendor":"intel","product":"celeron_j4125_firmware"},{"vendor":"intel","product":"celeron_j6412_firmware"},{"vendor":"intel","product":"celeron_j6413_firmware"},{"vendor":"intel","product":"celeron_n2805_firmware"},{"vendor":"intel","product":"celeron_n2806_firmware"},{"vendor":"intel","product":"celeron_n2807_firmware"},{"vendor":"intel","product":"celeron_n2808_firmware"},{"vendor":"intel","product":"celeron_n2810_firmware"},{"vendor":"intel","product":"celeron_n2815_firmware"},{"vendor":"intel","product":"celeron_n2820_firmware"},{"vendor":"intel","product":"celeron_n2830_firmware"},{"vendor":"intel","product":"celeron_n2840_firmware"},{"vendor":"intel","product":"celeron_n2910_firmware"},{"vendor":"intel","product":"celeron_n2920_firmware"},{"vendor":"intel","product":"celeron_n2930_firmware"},{"vendor":"intel","product":"celeron_n2940_firmware"},{"vendor":"intel","product":"celeron_n3000_firmware"},{"vendor":"intel","product":"celeron_n3010_firmware"},{"vendor":"intel","product":"celeron_n3050_firmware"},{"vendor":"intel","product":"celeron_n3060_firmware"},{"vendor":"intel","product":"celeron_n3150_firmware"},{"vendor":"intel","product":"celeron_n3160_firmware"},{"vendor":"intel","product":"celeron_n3350_firmware"},{"vendor":"intel","product":"celeron_n3350e_firmware"},{"vendor":"intel","product":"celeron_n3450_firmware"},{"vendor":"intel","product":"celeron_n4000_firmware"},{"vendor":"intel","product":"celeron_n4020_firmware"},{"vendor":"intel","product":"celeron_n4100_firmware"},{"vendor":"intel","product":"celeron_n4120_firmware"},{"vendor":"intel","product":"celeron_n4500_firmware"},{"vendor":"intel","product":"celeron_n4505_firmware"},{"vendor":"intel","product":"celeron_n5100_firmware"},{"vendor":"intel","product":"celeron_n5105_firmware"},{"vendor":"intel","product":"celeron_n6210_firmware"},{"vendor":"intel","product":"celeron_n6211_firmware"},{"vendor":"intel","product":"pentium_j2850_firmware"},{"vendor":"intel","product":"pentium_j2900_firmware"},{"vendor":"intel","product":"pentium_j3710_firmware"},{"vendor":"intel","product":"pentium_j4205_firmware"},{"vendor":"intel","product":"pentium_j6426_firmware"},{"vendor":"intel","product":"pentium_n3510_firmware"},{"vendor":"intel","product":"pentium_n3520_firmware"},{"vendor":"intel","product":"pentium_n3530_firmware"},{"vendor":"intel","product":"pentium_n3540_firmware"},{"vendor":"intel","product":"pentium_n3700_firmware"},{"vendor":"intel","product":"pentium_n3710_firmware"},{"vendor":"intel","product":"pentium_n4200_firmware"},{"vendor":"intel","product":"pentium_n4200e_firmware"},{"vendor":"intel","product":"pentium_n6415_firmware"},{"vendor":"intel","product":"pentium_silver_j5005_firmware"},{"vendor":"intel","product":"pentium_silver_j5040_firmware"},{"vendor":"intel","product":"pentium_silver_n5000_firmware"},{"vendor":"intel","product":"pentium_silver_n5030_firmware"},{"vendor":"intel","product":"pentium_silver_n6000_firmware"},{"vendor":"intel","product":"pentium_silver_n6005_firmware"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://security.netapp.com/advisory/ntap-20211210-0006/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-0146","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20211210-0006"},{"url":"https://github.com/advisories/GHSA-pqgg-8w8h-w2qq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-0146","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-0146","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1659636455","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0064.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30037","tags":["report"]},{"url":"https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220207","tags":["web"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00561.html","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1773","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24489","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24513","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220502-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1192615","tags":["report"]},{"url":"https://bugzilla.suse.com/1195779","tags":["report"]},{"url":"https://bugzilla.suse.com/1195780","tags":["report"]},{"url":"https://bugzilla.suse.com/1195781","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-0127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-0145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-0146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33120","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220541-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220574-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220575-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220576-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-0146","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5486-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5535-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-0146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-0127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-0145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-33117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-33120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-21123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-21127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-21151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-21166","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-21125","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7QEMHXA4R2RUIQPQL2RSCQ7TBADKDOH/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-0146","description":"Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.","status":"published","published":"2021-11-17T19:25:13Z","modified":"2026-10-08T21:13:57.268Z","updated_at":"2026-11-02T14:33:10.887946Z"}],"euvd":[{"id":"EUVD-2021-2765","description":"Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.","status":"published","published":"2021-11-17T19:25:13Z","modified":"2026-10-08T21:13:57Z","updated_at":"2026-11-02T17:27:26.452288Z"}],"ghsa":[{"id":"GHSA-pqgg-8w8h-w2qq","title":"Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which...","description":"Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.","status":"published","published":"2022-05-24T19:20:59Z","modified":"2026-10-09T00:32:15Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:12:59.31428Z"}],"nvd":[{"id":"CVE-2021-0146","description":"Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.","status":"published","published":"2021-11-17T20:15:09.18Z","modified":"2026-10-08T22:17:04.5Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:01.428028Z"}],"osv":[{"id":"ALPINE-CVE-2021-0146","description":"Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.","status":"published","published":"2021-11-17T20:15:09.18Z","modified":"2026-11-03T06:32:26.810222Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"BELL-CVE-2021-0146","title":"CVE-2021-0146 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:31.150264Z","modified":"2026-01-26T09:47:29.971581Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2021-0146","description":"Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.","status":"published","published":"2021-11-17T20:15:09Z","modified":"2026-04-16T04:39:57.696760122Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"OESA-2022-1773","title":"microcode_ctl security update","description":"This is a tool to transform and deploy microcode update for x86 CPUs.\n\nSecurity Fix(es):\n\nIncomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.(CVE-2020-24489)\n\nDomain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.(CVE-2020-24513)\n\nHardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.(CVE-2021-0146)","status":"published","published":"2022-07-22T11:05:02Z","modified":"2026-08-18T01:16:52.150218214Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2021-0146","description":"Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.","status":"published","published":"2021-11-17T20:15:00Z","modified":"2026-02-04T03:01:26.570826Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"CLSA-2022-1659636455","title":"Fix CVE(s): CVE-2022-21127, CVE-2021-0127, CVE-2022-21151, CVE-2022-21166, CVE-2021-33120, CVE-2021-33117, CVE-2022-21125, CVE-2021-0146, CVE-2021-0145, CVE-2022-21123","description":"\n   * SECURITY UPDATE: New microcode data file 2022-05-10\n     - New microcodes:\n       sig 0x00090672, pf_mask 0x03, 2022-03-03, rev 0x001f, size 212992\n       sig 0x00090675, pf_mask 0x03, 2022-03-03, rev 0x001f, size 212992\n       sig 0x000906a3, pf_mask 0x80, 2022-03-24, rev 0x041c, size 212992\n       sig 0x000906a4, pf_mask 0x80, 2022-03-24, rev 0x041c, size 212992\n       sig 0x000b06f2, pf_mask 0x03, 2022-03-03, rev 0x001f, size 212992\n       sig 0x000b06f5, pf_mask 0x03, 2022-03-03, rev 0x001f, size 212992\n     - Updated microcodes:\n       sig 0x00030679, pf_mask 0x0f, 2019-07-10, rev 0x090d, size 52224\n       sig 0x000306f2, pf_mask 0x6f, 2021-08-11, rev 0x0049, size 38912\n       sig 0x000306f4, pf_mask 0x80, 2021-05-24, rev 0x001a, size 23552\n       sig 0x000406e3, pf_mask 0xc0, 2021-11-12, rev 0x00f0, size 106496\n       sig 0x000406f1, pf_mask 0xef, 2021-05-19, rev 0xb000040, size 35840\n       sig 0x00050653, pf_mask 0x97, 2021-11-13, rev 0x100015d, size 34816\n       sig 0x00050654, pf_mask 0xb7, 2021-11-13, rev 0x2006d05, size 43008\n       sig 0x00050656, pf_mask 0xbf, 2021-12-10, rev 0x4003302, size 37888\n       sig 0x00050657, pf_mask 0xbf, 2021-12-10, rev 0x5003302, size 37888\n       sig 0x0005065b, pf_mask 0xbf, 2021-11-19, rev 0x7002501, size 29696\n       sig 0x00050663, pf_mask 0x10, 2021-06-12, rev 0x700001c, size 28672\n       sig 0x00050664, pf_mask 0x10, 2021-06-12, rev 0xf00001a, size 27648\n       sig 0x00050665, pf_mask 0x10, 2021-09-18, rev 0xe000014, size 23552\n       sig 0x000506c9, pf_mask 0x03, 2021-11-16, rev 0x0048, size 17408\n       sig 0x000506ca, pf_mask 0x03, 2021-11-16, rev 0x0028, size 16384\n       sig 0x000506e3, pf_mask 0x36, 2021-11-12, rev 0x00f0, size 109568\n       sig 0x000506f1, pf_mask 0x01, 2021-12-02, rev 0x0038, size 11264\n       sig 0x000606a6, pf_mask 0x87, 2022-03-30, rev 0xd000363, size 294912\n       sig 0x000706a1, pf_mask 0x01, 2021-11-22, rev 0x003a, size 75776\n       sig 0x000706a8, pf_mask 0x01, 2021-11-22, rev 0x001e, size 75776\n       sig 0x000706e5, pf_mask 0x80, 2022-03-09, rev 0x00b0, size 112640\n       sig 0x000806a1, pf_mask 0x10, 2022-03-26, rev 0x0031, size 34816\n       sig 0x000806c1, pf_mask 0x80, 2022-02-01, rev 0x00a4, size 109568\n       sig 0x000806c2, pf_mask 0xc2, 2021-12-07, rev 0x0026, size 97280\n       sig 0x000806d1, pf_mask 0xc2, 2021-12-07, rev 0x003e, size 102400\n       sig 0x000806e9, pf_mask 0x10, 2021-11-12, rev 0x00f0, size 105472\n       sig 0x000806e9, pf_mask 0xc0, 2021-11-12, rev 0x00f0, size 105472\n       sig 0x000806ea, pf_mask 0xc0, 2021-11-12, rev 0x00f0, size 105472\n       sig 0x000806eb, pf_mask 0xd0, 2021-11-15, rev 0x00f0, size 105472\n       sig 0x000806ec, pf_mask 0x94, 2021-11-17, rev 0x00f0, size 105472\n       sig 0x00090661, pf_mask 0x01, 2022-02-03, rev 0x0016, size 20480\n       sig 0x000906c0, pf_mask 0x01, 2022-02-19, rev 0x24000023, size 20480\n       sig 0x000906e9, pf_mask 0x2a, 2021-11-12, rev 0x00f0, size 108544\n       sig 0x000906ea, pf_mask 0x22, 2021-11-15, rev 0x00f0, size 104448\n       sig 0x000906eb, pf_mask 0x02, 2021-11-12, rev 0x00f0, size 105472\n       sig 0x000906ec, pf_mask 0x22, 2021-11-15, rev 0x00f0, size 104448\n       sig 0x000906ed, pf_mask 0x22, 2021-11-16, rev 0x00f0, size 104448\n       sig 0x000a0652, pf_mask 0x20, 2021-11-16, rev 0x00f0, size 96256\n       sig 0x000a0653, pf_mask 0x22, 2021-11-15, rev 0x00f0, size 97280\n       sig 0x000a0655, pf_mask 0x22, 2021-11-16, rev 0x00f0, size 96256\n       sig 0x000a0660, pf_mask 0x80, 2021-11-15, rev 0x00f0, size 96256\n       sig 0x000a0661, pf_mask 0x80, 2021-11-16, rev 0x00f0, size 96256\n       sig 0x000a0671, pf_mask 0x02, 2022-03-09, rev 0x0053, size 103424\n     - Removed microcodes:\n       sig 0x00080664, pf_mask 0x01, 2021-02-17, rev 0xb00000f, size 130048\n       sig 0x00080665, pf_mask 0x01, 2021-02-17, rev 0xb00000f, size 130048\n     - CVE-2021-0146,  INTEL-SA-00528\n     - CVE-2021-0127,  INTEL-SA-00532\n     - CVE-2021-0145,  INTEL-SA-00561\n     - CVE-2021-33117, INTEL-SA-00586\n     - CVE-2021-33120, INTEL-SA-00589\n     - CVE-2022-21123, INTEL-SA-00615\n     - CVE-2022-21125, INTEL-SA-00615\n     - CVE-2022-21127, INTEL-SA-00615\n     - CVE-2022-21166, INTEL-SA-00615\n     - CVE-2022-21151, INTEL-SA-00617\n   * source: update symlinks to reflect id of the latest release, 20220510","status":"published","published":"2022-08-04T18:07:35Z","modified":"2026-06-04T10:03:28.920999191Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"MGASA-2022-0064","title":"Updated microcode packages fix security vulnerabilities","description":"Updated microcodes for Intel processors, fixing various functional\nissues, and at least the following security issues:\n\nInsufficient control flow management in some Intel(R) Processors may allow\nan authenticated user to potentially enable a denial of service via local\naccess (CVE-2021-0127 / SA-00532).\n\nImproper initialization of shared resources in some Intel(R) Processors may\nallow an authenticated user to potentially enable information disclosure\nvia local access (CVE-2021-0145 / SA-00561).\n\nHardware allows activation of test or debug logic at runtime for some\nIntel(R) processors which may allow an unauthenticated user to potentially\nenable escalation of privilege via physical access\n(CVE-2021-0146 / SA-00528).\n\nOut of bounds read under complex microarchitectural condition in memory\nsubsystem for some Intel Atom(R) Processors may allow authenticated user\nto potentially enable information disclosure or cause denial of service\nvia network access (CVE-2021-33120 / SA-00589)\n\nFor info about the other fixes in this update, see the github reference.\n","status":"published","published":"2022-02-15T20:50:31Z","modified":"2026-04-16T04:42:38.86448549Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2022:0574-1","title":"Security update for ucode-intel","description":"This update for ucode-intel fixes the following issues:\n\nUpdated to Intel CPU Microcode 20220207 release.\n\n- CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)\n- CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)\n- CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)\n- CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)\n\n- Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)\n- Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)\n","status":"published","published":"2022-02-25T15:59:33Z","modified":"2026-02-04T02:33:19.369695Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11840-1","title":"ucode-intel-20220207-1.1 on GA media","description":"These are all security issues fixed in the ucode-intel-20220207-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:45:24.398619Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:0502-1","title":"Security update for ucode-intel","description":"This update for ucode-intel fixes the following issues:\n\nUpdated to Intel CPU Microcode 20220207 release.\n\n- CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)\n- CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)\n- CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)\n- CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)\n\n- Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)\n- Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)\n","status":"published","published":"2022-02-18T09:54:06Z","modified":"2026-02-04T04:30:59.280139Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0541-1","title":"Security update for ucode-intel","description":"This update for ucode-intel fixes the following issues:\n\nUpdated to Intel CPU Microcode 20220207 release.\n\n- CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)\n- CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)\n- CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)\n- CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)\n\n- Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)\n- Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)\n","status":"published","published":"2022-02-21T12:49:07Z","modified":"2026-02-04T03:53:23.859463Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0574-1","title":"Security update for ucode-intel","description":"This update for ucode-intel fixes the following issues:\n\nUpdated to Intel CPU Microcode 20220207 release.\n\n- CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)\n- CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)\n- CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)\n- CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)\n\n- Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)\n- Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)\n","status":"published","published":"2022-02-25T15:59:46Z","modified":"2025-05-02T04:30:59.160842Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0575-1","title":"Security update for ucode-intel","description":"This update for ucode-intel fixes the following issues:\n\nUpdated to Intel CPU Microcode 20220207 release.\n\n- CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)\n- CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)\n- CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)\n- CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)\n\n- Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)\n- Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)\n","status":"published","published":"2022-02-25T16:00:30Z","modified":"2026-02-04T02:17:07.431026Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0576-1","title":"Security update for ucode-intel","description":"This update for ucode-intel fixes the following issues:\n\nUpdated to Intel CPU Microcode 20220207 release.\n\n- CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)\n- CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)\n- CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)\n- CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)\n\n- Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)\n- Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)\n","status":"published","published":"2022-02-25T16:00:37Z","modified":"2026-02-04T02:57:14.416489Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"USN-5486-1","title":"intel-microcode vulnerabilities","description":"It was discovered that some Intel processors did not implement sufficient\ncontrol flow management. A local attacker could use this to cause a denial\nof service. (CVE-2021-0127)\n\nJoseph Nuzman discovered that some Intel processors did not properly\ninitialise shared resources. A local attacker could use this to obtain\nsensitive information. (CVE-2021-0145)\n\nMark Ermolov, Dmitry Sklyarov and Maxim Goryachy discovered that some Intel\nprocessors did not prevent test and debug logic from being activated at\nruntime. A local attacker could use this to escalate\nprivileges. (CVE-2021-0146)\n\nIt was discovered that some Intel processors did not properly restrict\naccess in some situations. A local attacker could use this to obtain\nsensitive information. (CVE-2021-33117)\n\nBrandon Miller discovered that some Intel processors did not properly\nrestrict access in some situations. A local attacker could use this to\nobtain sensitive information or a remote attacker could use this to cause a\ndenial of service. (CVE-2021-33120)\n\nIt was discovered that some Intel processors did not completely perform\ncleanup actions on multi-core shared buffers. A local attacker could\npossibly use this to expose sensitive information. (CVE-2022-21123,\nCVE-2022-21127)\n\nAlysa Milburn, Jason Brandt, Avishai Redelman and Nir Lavi discovered that\nsome Intel processors improperly optimised security-critical code. A local\nattacker could possibly use this to expose sensitive\ninformation. (CVE-2022-21151)\n\nIt was discovered that some Intel processors did not properly perform\ncleanup during specific special register write operations. A local attacker\ncould possibly use this to expose sensitive information. (CVE-2022-21166)\n","status":"published","published":"2022-06-20T04:21:50Z","modified":"2026-09-14T11:17:26.573728608Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5535-1","title":"Intel Microcode vulnerabilities","description":"Joseph Nuzman discovered that some Intel processors did not properly\ninitialise shared resources. A local attacker could use this to obtain\nsensitive information. (CVE-2021-0145)\n\nMark Ermolov, Dmitry Sklyarov and Maxim Goryachy discovered that some Intel\nprocessors did not prevent test and debug logic from being activated at\nruntime. A local attacker could use this to escalate\nprivileges. (CVE-2021-0146)\n\nIt was discovered that some Intel processors did not implement sufficient\ncontrol flow management. A local attacker could use this to cause a denial\nof service (system crash). (CVE-2021-0127)\n\nIt was discovered that some Intel processors did not completely perform\ncleanup actions on multi-core shared buffers. A local attacker could\npossibly use this to expose sensitive information. (CVE-2022-21123,\nCVE-2022-21127)\n\nIt was discovered that some Intel processors did not completely perform\ncleanup actions on microarchitectural fill buffers. A local attacker could\npossibly use this to expose sensitive information. (CVE-2022-21125)\n\nAlysa Milburn, Jason Brandt, Avishai Redelman and Nir Lavi discovered that\nsome Intel processors improperly optimised security-critical code. A local\nattacker could possibly use this to expose sensitive\ninformation. (CVE-2022-21151)\n\nIt was discovered that some Intel processors did not properly perform\ncleanup during specific special register write operations. A local attacker\ncould possibly use this to expose sensitive information. (CVE-2022-21166)\n\nIt was discovered that some Intel processors did not properly restrict\naccess in some situations. A local attacker could use this to obtain\nsensitive information. (CVE-2021-33117)\n\nBrandon Miller discovered that some Intel processors did not properly\nrestrict access in some situations. A local attacker could use this to\nobtain sensitive information or a remote attacker could use this to\ncause a denial of service (system crash). (CVE-2021-33120)\n","status":"published","published":"2022-07-28T05:31:23Z","modified":"2026-09-14T11:17:26.412097893Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}