{"id":"CVE-2021-33117","aliases":["CLSA-2022-1659636455","DEBIAN-CVE-2021-33117","EUVD-2021-19832","GHSA-fmf3-xj8j-qrw9","UBUNTU-CVE-2021-33117","USN-5486-1","USN-5535-1"],"status":"published","title":"Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS...","description":"Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00319,"percentile":0.25155,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-05-12T16:36:03Z","modified":"2026-10-23T18:03:14Z","fixes":[{"ecosystem":"Debian:12","package":"intel-microcode","fixed_in":["3.20220207.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"intel-microcode","fixed_in":["3.20220207.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"intel-microcode","fixed_in":["3.20220207.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"intel-microcode","fixed_in":["3.20220510.0ubuntu0.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"intel-microcode","fixed_in":["3.20220510.0ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"intel-microcode","fixed_in":["3.20220510.0ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"intel-microcode","fixed_in":["3.20220510.0ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.16.04.1+tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:12","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220207.1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1","3.20180807a.1~deb9u1","3.20180807a.2","3.20180807a.2~bpo8+1","3.20180807a.2~bpo9+1","3.20180807a.2~deb9u1","3.20190312.1","3.20190312.1~bpo9+1","3.20190514.1","3.20190514.1~deb8u1","3.20190514.1~deb9u1","3.20190618.1","3.20190618.1~deb8u1","3.20190618.1~deb9u1","3.20190918.1","3.20191112.1","3.20191112.1~deb10u1","3.20191112.1~deb9u1","3.20191113.1","3.20191115.1","3.20191115.1~deb10u1","3.20191115.1~deb9u1","3.20191115.2","3.20191115.2~deb10u1","3.20191115.2~deb8u1","3.20191115.2~deb9u1","3.20200508.1","3.20200520.1","3.20200609.1","3.20200609.1~deb10u1","3.20200609.1~deb9u1","3.20200609.2","3.20200609.2~deb10u1","3.20200609.2~deb8u1","3.20200609.2~deb9u1","3.20200616.1","3.20200616.1~deb10u1","3.20200616.1~deb9u1","3.20201110.1","3.20201118.1","3.20201118.1~bpo10+1","3.20201118.1~deb10u1","3.20201118.1~deb9u1","3.20210216.1","3.20210216.1~deb10u1","3.20210608.1","3.20210608.2","3.20210608.2~deb10u1","3.20210608.2~deb9u2","3.20220207.1~bpo11+1","3.20220207.1~deb10u1","3.20220207.1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220207.1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1","3.20180807a.1~deb9u1","3.20180807a.2","3.20180807a.2~bpo8+1","3.20180807a.2~bpo9+1","3.20180807a.2~deb9u1","3.20190312.1","3.20190312.1~bpo9+1","3.20190514.1","3.20190514.1~deb8u1","3.20190514.1~deb9u1","3.20190618.1","3.20190618.1~deb8u1","3.20190618.1~deb9u1","3.20190918.1","3.20191112.1","3.20191112.1~deb10u1","3.20191112.1~deb9u1","3.20191113.1","3.20191115.1","3.20191115.1~deb10u1","3.20191115.1~deb9u1","3.20191115.2","3.20191115.2~deb10u1","3.20191115.2~deb8u1","3.20191115.2~deb9u1","3.20200508.1","3.20200520.1","3.20200609.1","3.20200609.1~deb10u1","3.20200609.1~deb9u1","3.20200609.2","3.20200609.2~deb10u1","3.20200609.2~deb8u1","3.20200609.2~deb9u1","3.20200616.1","3.20200616.1~deb10u1","3.20200616.1~deb9u1","3.20201110.1","3.20201118.1","3.20201118.1~bpo10+1","3.20201118.1~deb10u1","3.20201118.1~deb9u1","3.20210216.1","3.20210216.1~deb10u1","3.20210608.1","3.20210608.2","3.20210608.2~deb10u1","3.20210608.2~deb9u2","3.20220207.1~bpo11+1","3.20220207.1~deb10u1","3.20220207.1~deb11u1"]},{"source":"osv","ecosystem":"Debian:14","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220207.1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1","3.20180807a.1~deb9u1","3.20180807a.2","3.20180807a.2~bpo8+1","3.20180807a.2~bpo9+1","3.20180807a.2~deb9u1","3.20190312.1","3.20190312.1~bpo9+1","3.20190514.1","3.20190514.1~deb8u1","3.20190514.1~deb9u1","3.20190618.1","3.20190618.1~deb8u1","3.20190618.1~deb9u1","3.20190918.1","3.20191112.1","3.20191112.1~deb10u1","3.20191112.1~deb9u1","3.20191113.1","3.20191115.1","3.20191115.1~deb10u1","3.20191115.1~deb9u1","3.20191115.2","3.20191115.2~deb10u1","3.20191115.2~deb8u1","3.20191115.2~deb9u1","3.20200508.1","3.20200520.1","3.20200609.1","3.20200609.1~deb10u1","3.20200609.1~deb9u1","3.20200609.2","3.20200609.2~deb10u1","3.20200609.2~deb8u1","3.20200609.2~deb9u1","3.20200616.1","3.20200616.1~deb10u1","3.20200616.1~deb9u1","3.20201110.1","3.20201118.1","3.20201118.1~bpo10+1","3.20201118.1~deb10u1","3.20201118.1~deb9u1","3.20210216.1","3.20210216.1~deb10u1","3.20210608.1","3.20210608.2","3.20210608.2~deb10u1","3.20210608.2~deb9u2","3.20220207.1~bpo11+1","3.20220207.1~deb10u1","3.20220207.1~deb11u1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.20130906.1ubuntu2","1.20130906.1ubuntu3","2.20140122.1","2.20140430.1ubuntu1","2.20140624-t-1ubuntu2","3.20180108.0~ubuntu14.04.2","3.20180108.0+really20170707ubuntu14.04.1","3.20180312.0~ubuntu14.04.1","3.20180425.1~ubuntu0.14.04.1","3.20180425.1~ubuntu0.14.04.2","3.20180807a.0ubuntu0.14.04.1","3.20190514.0ubuntu0.14.04.1","3.20190514.0ubuntu0.14.04.2","3.20190618.0ubuntu0.14.04.1","3.20191112-0ubuntu0.14.04.2","3.20191115.1ubuntu0.14.04.1","3.20191115.1ubuntu0.14.04.2","3.20200609.0ubuntu0.14.04.0","3.20200609.0ubuntu0.14.04.1","3.20201110.0ubuntu0.14.04.1","3.20201110.0ubuntu0.14.04.2","3.20210608.0ubuntu0.14.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.16.04.1+esm1"}]}],"versions":["3.20150121.1","3.20151106.1","3.20170707.1~ubuntu16.04.0","3.20180108.0~ubuntu16.04.2","3.20180108.0+really20170707ubuntu16.04.1","3.20180312.0~ubuntu16.04.1","3.20180425.1~ubuntu0.16.04.1","3.20180425.1~ubuntu0.16.04.2","3.20180807a.0ubuntu0.16.04.1","3.20190514.0ubuntu0.16.04.1","3.20190514.0ubuntu0.16.04.2","3.20190618.0ubuntu0.16.04.1","3.20191112-0ubuntu0.16.04.2","3.20191115.1ubuntu0.16.04.1","3.20191115.1ubuntu0.16.04.2","3.20200609.0ubuntu0.16.04.0","3.20200609.0ubuntu0.16.04.1","3.20201110.0ubuntu0.16.04.1","3.20201110.0ubuntu0.16.04.2","3.20210216.0ubuntu0.16.04.1","3.20210608.0ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.18.04.1"}]}],"versions":["3.20170707.1","3.20171117.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.0~ubuntu18.04.1","3.20180425.1~ubuntu0.18.04.1","3.20180425.1~ubuntu0.18.04.2","3.20180807a.0ubuntu0.18.04.1","3.20190514.0ubuntu0.18.04.2","3.20190514.0ubuntu0.18.04.3","3.20190618.0ubuntu0.18.04.1","3.20191112-0ubuntu0.18.04.2","3.20191115.1ubuntu0.18.04.1","3.20191115.1ubuntu0.18.04.2","3.20200609.0ubuntu0.18.04.0","3.20200609.0ubuntu0.18.04.1","3.20201110.0ubuntu0.18.04.1","3.20201110.0ubuntu0.18.04.2","3.20210216.0ubuntu0.18.04.1","3.20210608.0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.20.04.1"}]}],"versions":["3.20190918.1ubuntu1","3.20191115.1ubuntu1","3.20191115.1ubuntu2","3.20191115.1ubuntu3","3.20200609.0ubuntu0.20.04.0","3.20200609.0ubuntu0.20.04.1","3.20200609.0ubuntu0.20.04.2","3.20201110.0ubuntu0.20.04.1","3.20201110.0ubuntu0.20.04.2","3.20210216.0ubuntu0.20.04.1","3.20210608.0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.22.04.1"}]}],"versions":["3.20210608.2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.18.04.1"}]}],"versions":["3.20170707.1","3.20171117.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.0~ubuntu18.04.1","3.20180425.1~ubuntu0.18.04.1","3.20180425.1~ubuntu0.18.04.2","3.20180807a.0ubuntu0.18.04.1","3.20190514.0ubuntu0.18.04.2","3.20190514.0ubuntu0.18.04.3","3.20190618.0ubuntu0.18.04.1","3.20191112-0ubuntu0.18.04.2","3.20191115.1ubuntu0.18.04.1","3.20191115.1ubuntu0.18.04.2","3.20200609.0ubuntu0.18.04.0","3.20200609.0ubuntu0.18.04.1","3.20201110.0ubuntu0.18.04.1","3.20201110.0ubuntu0.18.04.2","3.20210216.0ubuntu0.18.04.1","3.20210608.0ubuntu0.18.04.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.20.04.1"}]}],"versions":["3.20190918.1ubuntu1","3.20191115.1ubuntu1","3.20191115.1ubuntu2","3.20191115.1ubuntu3","3.20200609.0ubuntu0.20.04.0","3.20200609.0ubuntu0.20.04.1","3.20200609.0ubuntu0.20.04.2","3.20201110.0ubuntu0.20.04.1","3.20201110.0ubuntu0.20.04.2","3.20210216.0ubuntu0.20.04.1","3.20210608.0ubuntu0.20.04.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.22.04.1"}]}],"versions":["3.20210608.2ubuntu1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20220510.0ubuntu0.16.04.1+esm1"}]}],"versions":["3.20150121.1","3.20151106.1","3.20170707.1~ubuntu16.04.0","3.20180108.0~ubuntu16.04.2","3.20180108.0+really20170707ubuntu16.04.1","3.20180312.0~ubuntu16.04.1","3.20180425.1~ubuntu0.16.04.1","3.20180425.1~ubuntu0.16.04.2","3.20180807a.0ubuntu0.16.04.1","3.20190514.0ubuntu0.16.04.1","3.20190514.0ubuntu0.16.04.2","3.20190618.0ubuntu0.16.04.1","3.20191112-0ubuntu0.16.04.2","3.20191115.1ubuntu0.16.04.1","3.20191115.1ubuntu0.16.04.2","3.20200609.0ubuntu0.16.04.0","3.20200609.0ubuntu0.16.04.1","3.20201110.0ubuntu0.16.04.1","3.20201110.0ubuntu0.16.04.2","3.20210216.0ubuntu0.16.04.1","3.20210608.0ubuntu0.16.04.1+esm1"],"bundled":10}],"products":[{"vendor":"intel","product":"bios"},{"vendor":"netapp","product":"fas\\/aff_bios"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00586.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://security.netapp.com/advisory/ntap-20220818-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33117"},{"url":"https://security.netapp.com/advisory/ntap-20220818-0001"},{"url":"https://github.com/advisories/GHSA-fmf3-xj8j-qrw9"},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1659636455","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-33117","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-33117","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5486-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5535-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-0127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-0145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-0146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-33120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-21123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-21127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-21151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-21166","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-21125","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-33117","description":"Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.","status":"published","published":"2022-05-12T16:36:03Z","modified":"2025-05-05T16:49:44.889Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:33:10.555814Z"}],"euvd":[{"id":"EUVD-2021-19832","description":"Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.","status":"published","published":"2022-05-12T16:36:03Z","modified":"2025-05-05T16:49:44Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:56.053822Z"}],"ghsa":[{"id":"GHSA-fmf3-xj8j-qrw9","title":"Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS...","description":"Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.","status":"published","published":"2022-05-13T00:00:47Z","modified":"2025-05-05T18:32:55Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:02:07.480076Z"}],"nvd":[{"id":"CVE-2021-33117","description":"Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.","status":"published","published":"2022-05-12T17:15:09.283Z","modified":"2026-06-17T03:54:11.48Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:07:06.029737Z"}],"osv":[{"id":"CVE-2021-33117","description":"Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.","status":"published","published":"2022-05-12T17:15:09.283Z","modified":"2026-03-14T01:46:02.161478Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:19.793849Z"},{"id":"DEBIAN-CVE-2021-33117","description":"Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.","status":"published","published":"2022-05-12T17:15:09.283Z","modified":"2026-10-23T18:03:14.850759174Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"UBUNTU-CVE-2021-33117","description":"Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.","status":"published","published":"2022-05-12T17:15:00Z","modified":"2026-02-04T02:47:50.131485Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:27.332852Z"},{"id":"CLSA-2022-1659636455","title":"Fix CVE(s): CVE-2022-21127, CVE-2021-0127, CVE-2022-21151, CVE-2022-21166, CVE-2021-33120, CVE-2021-33117, CVE-2022-21125, CVE-2021-0146, CVE-2021-0145, CVE-2022-21123","description":"\n   * SECURITY UPDATE: New microcode data file 2022-05-10\n     - New microcodes:\n       sig 0x00090672, pf_mask 0x03, 2022-03-03, rev 0x001f, size 212992\n       sig 0x00090675, pf_mask 0x03, 2022-03-03, rev 0x001f, size 212992\n       sig 0x000906a3, pf_mask 0x80, 2022-03-24, rev 0x041c, size 212992\n       sig 0x000906a4, pf_mask 0x80, 2022-03-24, rev 0x041c, size 212992\n       sig 0x000b06f2, pf_mask 0x03, 2022-03-03, rev 0x001f, size 212992\n       sig 0x000b06f5, pf_mask 0x03, 2022-03-03, rev 0x001f, size 212992\n     - Updated microcodes:\n       sig 0x00030679, pf_mask 0x0f, 2019-07-10, rev 0x090d, size 52224\n       sig 0x000306f2, pf_mask 0x6f, 2021-08-11, rev 0x0049, size 38912\n       sig 0x000306f4, pf_mask 0x80, 2021-05-24, rev 0x001a, size 23552\n       sig 0x000406e3, pf_mask 0xc0, 2021-11-12, rev 0x00f0, size 106496\n       sig 0x000406f1, pf_mask 0xef, 2021-05-19, rev 0xb000040, size 35840\n       sig 0x00050653, pf_mask 0x97, 2021-11-13, rev 0x100015d, size 34816\n       sig 0x00050654, pf_mask 0xb7, 2021-11-13, rev 0x2006d05, size 43008\n       sig 0x00050656, pf_mask 0xbf, 2021-12-10, rev 0x4003302, size 37888\n       sig 0x00050657, pf_mask 0xbf, 2021-12-10, rev 0x5003302, size 37888\n       sig 0x0005065b, pf_mask 0xbf, 2021-11-19, rev 0x7002501, size 29696\n       sig 0x00050663, pf_mask 0x10, 2021-06-12, rev 0x700001c, size 28672\n       sig 0x00050664, pf_mask 0x10, 2021-06-12, rev 0xf00001a, size 27648\n       sig 0x00050665, pf_mask 0x10, 2021-09-18, rev 0xe000014, size 23552\n       sig 0x000506c9, pf_mask 0x03, 2021-11-16, rev 0x0048, size 17408\n       sig 0x000506ca, pf_mask 0x03, 2021-11-16, rev 0x0028, size 16384\n       sig 0x000506e3, pf_mask 0x36, 2021-11-12, rev 0x00f0, size 109568\n       sig 0x000506f1, pf_mask 0x01, 2021-12-02, rev 0x0038, size 11264\n       sig 0x000606a6, pf_mask 0x87, 2022-03-30, rev 0xd000363, size 294912\n       sig 0x000706a1, pf_mask 0x01, 2021-11-22, rev 0x003a, size 75776\n       sig 0x000706a8, pf_mask 0x01, 2021-11-22, rev 0x001e, size 75776\n       sig 0x000706e5, pf_mask 0x80, 2022-03-09, rev 0x00b0, size 112640\n       sig 0x000806a1, pf_mask 0x10, 2022-03-26, rev 0x0031, size 34816\n       sig 0x000806c1, pf_mask 0x80, 2022-02-01, rev 0x00a4, size 109568\n       sig 0x000806c2, pf_mask 0xc2, 2021-12-07, rev 0x0026, size 97280\n       sig 0x000806d1, pf_mask 0xc2, 2021-12-07, rev 0x003e, size 102400\n       sig 0x000806e9, pf_mask 0x10, 2021-11-12, rev 0x00f0, size 105472\n       sig 0x000806e9, pf_mask 0xc0, 2021-11-12, rev 0x00f0, size 105472\n       sig 0x000806ea, pf_mask 0xc0, 2021-11-12, rev 0x00f0, size 105472\n       sig 0x000806eb, pf_mask 0xd0, 2021-11-15, rev 0x00f0, size 105472\n       sig 0x000806ec, pf_mask 0x94, 2021-11-17, rev 0x00f0, size 105472\n       sig 0x00090661, pf_mask 0x01, 2022-02-03, rev 0x0016, size 20480\n       sig 0x000906c0, pf_mask 0x01, 2022-02-19, rev 0x24000023, size 20480\n       sig 0x000906e9, pf_mask 0x2a, 2021-11-12, rev 0x00f0, size 108544\n       sig 0x000906ea, pf_mask 0x22, 2021-11-15, rev 0x00f0, size 104448\n       sig 0x000906eb, pf_mask 0x02, 2021-11-12, rev 0x00f0, size 105472\n       sig 0x000906ec, pf_mask 0x22, 2021-11-15, rev 0x00f0, size 104448\n       sig 0x000906ed, pf_mask 0x22, 2021-11-16, rev 0x00f0, size 104448\n       sig 0x000a0652, pf_mask 0x20, 2021-11-16, rev 0x00f0, size 96256\n       sig 0x000a0653, pf_mask 0x22, 2021-11-15, rev 0x00f0, size 97280\n       sig 0x000a0655, pf_mask 0x22, 2021-11-16, rev 0x00f0, size 96256\n       sig 0x000a0660, pf_mask 0x80, 2021-11-15, rev 0x00f0, size 96256\n       sig 0x000a0661, pf_mask 0x80, 2021-11-16, rev 0x00f0, size 96256\n       sig 0x000a0671, pf_mask 0x02, 2022-03-09, rev 0x0053, size 103424\n     - Removed microcodes:\n       sig 0x00080664, pf_mask 0x01, 2021-02-17, rev 0xb00000f, size 130048\n       sig 0x00080665, pf_mask 0x01, 2021-02-17, rev 0xb00000f, size 130048\n     - CVE-2021-0146,  INTEL-SA-00528\n     - CVE-2021-0127,  INTEL-SA-00532\n     - CVE-2021-0145,  INTEL-SA-00561\n     - CVE-2021-33117, INTEL-SA-00586\n     - CVE-2021-33120, INTEL-SA-00589\n     - CVE-2022-21123, INTEL-SA-00615\n     - CVE-2022-21125, INTEL-SA-00615\n     - CVE-2022-21127, INTEL-SA-00615\n     - CVE-2022-21166, INTEL-SA-00615\n     - CVE-2022-21151, INTEL-SA-00617\n   * source: update symlinks to reflect id of the latest release, 20220510","status":"published","published":"2022-08-04T18:07:35Z","modified":"2026-06-04T10:03:28.920999191Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"USN-5486-1","title":"intel-microcode vulnerabilities","description":"It was discovered that some Intel processors did not implement sufficient\ncontrol flow management. A local attacker could use this to cause a denial\nof service. (CVE-2021-0127)\n\nJoseph Nuzman discovered that some Intel processors did not properly\ninitialise shared resources. A local attacker could use this to obtain\nsensitive information. (CVE-2021-0145)\n\nMark Ermolov, Dmitry Sklyarov and Maxim Goryachy discovered that some Intel\nprocessors did not prevent test and debug logic from being activated at\nruntime. A local attacker could use this to escalate\nprivileges. (CVE-2021-0146)\n\nIt was discovered that some Intel processors did not properly restrict\naccess in some situations. A local attacker could use this to obtain\nsensitive information. (CVE-2021-33117)\n\nBrandon Miller discovered that some Intel processors did not properly\nrestrict access in some situations. A local attacker could use this to\nobtain sensitive information or a remote attacker could use this to cause a\ndenial of service. (CVE-2021-33120)\n\nIt was discovered that some Intel processors did not completely perform\ncleanup actions on multi-core shared buffers. A local attacker could\npossibly use this to expose sensitive information. (CVE-2022-21123,\nCVE-2022-21127)\n\nAlysa Milburn, Jason Brandt, Avishai Redelman and Nir Lavi discovered that\nsome Intel processors improperly optimised security-critical code. A local\nattacker could possibly use this to expose sensitive\ninformation. (CVE-2022-21151)\n\nIt was discovered that some Intel processors did not properly perform\ncleanup during specific special register write operations. A local attacker\ncould possibly use this to expose sensitive information. (CVE-2022-21166)\n","status":"published","published":"2022-06-20T04:21:50Z","modified":"2026-09-14T11:17:26.573728608Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5535-1","title":"Intel Microcode vulnerabilities","description":"Joseph Nuzman discovered that some Intel processors did not properly\ninitialise shared resources. A local attacker could use this to obtain\nsensitive information. (CVE-2021-0145)\n\nMark Ermolov, Dmitry Sklyarov and Maxim Goryachy discovered that some Intel\nprocessors did not prevent test and debug logic from being activated at\nruntime. A local attacker could use this to escalate\nprivileges. (CVE-2021-0146)\n\nIt was discovered that some Intel processors did not implement sufficient\ncontrol flow management. A local attacker could use this to cause a denial\nof service (system crash). (CVE-2021-0127)\n\nIt was discovered that some Intel processors did not completely perform\ncleanup actions on multi-core shared buffers. A local attacker could\npossibly use this to expose sensitive information. (CVE-2022-21123,\nCVE-2022-21127)\n\nIt was discovered that some Intel processors did not completely perform\ncleanup actions on microarchitectural fill buffers. A local attacker could\npossibly use this to expose sensitive information. (CVE-2022-21125)\n\nAlysa Milburn, Jason Brandt, Avishai Redelman and Nir Lavi discovered that\nsome Intel processors improperly optimised security-critical code. A local\nattacker could possibly use this to expose sensitive\ninformation. (CVE-2022-21151)\n\nIt was discovered that some Intel processors did not properly perform\ncleanup during specific special register write operations. A local attacker\ncould possibly use this to expose sensitive information. (CVE-2022-21166)\n\nIt was discovered that some Intel processors did not properly restrict\naccess in some situations. A local attacker could use this to obtain\nsensitive information. (CVE-2021-33117)\n\nBrandon Miller discovered that some Intel processors did not properly\nrestrict access in some situations. A local attacker could use this to\nobtain sensitive information or a remote attacker could use this to\ncause a denial of service (system crash). (CVE-2021-33120)\n","status":"published","published":"2022-07-28T05:31:23Z","modified":"2026-09-14T11:17:26.412097893Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}