{"id":"CVE-2022-21131","aliases":["EUVD-2022-26378","GHSA-5jmq-jhgh-33jr","MGASA-2022-0193"],"status":"published","title":"Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to...","description":"Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.003,"percentile":0.22912,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2022-05-12T16:35:44Z","modified":"2026-06-17T04:25:34Z","affected":[{"source":"osv","ecosystem":"Mageia:8","package":"microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20220510-1.mga8.nonfree"}]}],"bundled":4}],"products":[{"vendor":"intel","product":"core_i9-7900x_firmware"},{"vendor":"intel","product":"core_i9-7920x_firmware"},{"vendor":"intel","product":"core_i9-7940x_firmware"},{"vendor":"intel","product":"core_i9-7960x_firmware"},{"vendor":"intel","product":"core_i9-7980xe_firmware"},{"vendor":"intel","product":"xeon_bronze_3104_firmware"},{"vendor":"intel","product":"xeon_bronze_3106_firmware"},{"vendor":"intel","product":"xeon_bronze_3204_firmware"},{"vendor":"intel","product":"xeon_bronze_3206r_firmware"},{"vendor":"intel","product":"xeon_d-2123it_firmware"},{"vendor":"intel","product":"xeon_d-2141i_firmware"},{"vendor":"intel","product":"xeon_d-2142it_firmware"},{"vendor":"intel","product":"xeon_d-2143it_firmware"},{"vendor":"intel","product":"xeon_d-2145nt_firmware"},{"vendor":"intel","product":"xeon_d-2146nt_firmware"},{"vendor":"intel","product":"xeon_d-2161i_firmware"},{"vendor":"intel","product":"xeon_d-2163it_firmware"},{"vendor":"intel","product":"xeon_d-2166nt_firmware"},{"vendor":"intel","product":"xeon_d-2173it_firmware"},{"vendor":"intel","product":"xeon_d-2177nt_firmware"},{"vendor":"intel","product":"xeon_d-2183it_firmware"},{"vendor":"intel","product":"xeon_d-2187nt_firmware"},{"vendor":"intel","product":"xeon_gold_5115_firmware"},{"vendor":"intel","product":"xeon_gold_5118_firmware"},{"vendor":"intel","product":"xeon_gold_5119t_firmware"},{"vendor":"intel","product":"xeon_gold_5120_firmware"},{"vendor":"intel","product":"xeon_gold_5120t_firmware"},{"vendor":"intel","product":"xeon_gold_5122_firmware"},{"vendor":"intel","product":"xeon_gold_5215_firmware"},{"vendor":"intel","product":"xeon_gold_5215l_firmware"},{"vendor":"intel","product":"xeon_gold_5217_firmware"},{"vendor":"intel","product":"xeon_gold_5218_firmware"},{"vendor":"intel","product":"xeon_gold_5218b_firmware"},{"vendor":"intel","product":"xeon_gold_5218n_firmware"},{"vendor":"intel","product":"xeon_gold_5218r_firmware"},{"vendor":"intel","product":"xeon_gold_5218t_firmware"},{"vendor":"intel","product":"xeon_gold_5220_firmware"},{"vendor":"intel","product":"xeon_gold_5220r_firmware"},{"vendor":"intel","product":"xeon_gold_5220s_firmware"},{"vendor":"intel","product":"xeon_gold_5220t_firmware"},{"vendor":"intel","product":"xeon_gold_5222_firmware"},{"vendor":"intel","product":"xeon_gold_6126_firmware"},{"vendor":"intel","product":"xeon_gold_6126f_firmware"},{"vendor":"intel","product":"xeon_gold_6126t_firmware"},{"vendor":"intel","product":"xeon_gold_6128_firmware"},{"vendor":"intel","product":"xeon_gold_6130_firmware"},{"vendor":"intel","product":"xeon_gold_6130f_firmware"},{"vendor":"intel","product":"xeon_gold_6130t_firmware"},{"vendor":"intel","product":"xeon_gold_6132_firmware"},{"vendor":"intel","product":"xeon_gold_6134_firmware"},{"vendor":"intel","product":"xeon_gold_6136_firmware"},{"vendor":"intel","product":"xeon_gold_6138_firmware"},{"vendor":"intel","product":"xeon_gold_6138f_firmware"},{"vendor":"intel","product":"xeon_gold_6138p_firmware"},{"vendor":"intel","product":"xeon_gold_6138t_firmware"},{"vendor":"intel","product":"xeon_gold_6140_firmware"},{"vendor":"intel","product":"xeon_gold_6142_firmware"},{"vendor":"intel","product":"xeon_gold_6142f_firmware"},{"vendor":"intel","product":"xeon_gold_6144_firmware"},{"vendor":"intel","product":"xeon_gold_6146_firmware"},{"vendor":"intel","product":"xeon_gold_6148_firmware"},{"vendor":"intel","product":"xeon_gold_6148f_firmware"},{"vendor":"intel","product":"xeon_gold_6150_firmware"},{"vendor":"intel","product":"xeon_gold_6152_firmware"},{"vendor":"intel","product":"xeon_gold_6154_firmware"},{"vendor":"intel","product":"xeon_gold_6208u_firmware"},{"vendor":"intel","product":"xeon_gold_6209u_firmware"},{"vendor":"intel","product":"xeon_gold_6210u_firmware"},{"vendor":"intel","product":"xeon_gold_6212u_firmware"},{"vendor":"intel","product":"xeon_gold_6222v_firmware"},{"vendor":"intel","product":"xeon_gold_6226_firmware"},{"vendor":"intel","product":"xeon_gold_6226r_firmware"},{"vendor":"intel","product":"xeon_gold_6230_firmware"},{"vendor":"intel","product":"xeon_gold_6230n_firmware"},{"vendor":"intel","product":"xeon_gold_6230r_firmware"},{"vendor":"intel","product":"xeon_gold_6230t_firmware"},{"vendor":"intel","product":"xeon_gold_6234_firmware"},{"vendor":"intel","product":"xeon_gold_6238_firmware"},{"vendor":"intel","product":"xeon_gold_6238l_firmware"},{"vendor":"intel","product":"xeon_gold_6238r_firmware"},{"vendor":"intel","product":"xeon_gold_6238t_firmware"},{"vendor":"intel","product":"xeon_gold_6240_firmware"},{"vendor":"intel","product":"xeon_gold_6240l_firmware"},{"vendor":"intel","product":"xeon_gold_6240r_firmware"},{"vendor":"intel","product":"xeon_gold_6240y_firmware"},{"vendor":"intel","product":"xeon_gold_6242_firmware"},{"vendor":"intel","product":"xeon_gold_6242r_firmware"},{"vendor":"intel","product":"xeon_gold_6244_firmware"},{"vendor":"intel","product":"xeon_gold_6246_firmware"},{"vendor":"intel","product":"xeon_gold_6246r_firmware"},{"vendor":"intel","product":"xeon_gold_6248_firmware"},{"vendor":"intel","product":"xeon_gold_6248r_firmware"},{"vendor":"intel","product":"xeon_gold_6250_firmware"},{"vendor":"intel","product":"xeon_gold_6250l_firmware"},{"vendor":"intel","product":"xeon_gold_6252_firmware"},{"vendor":"intel","product":"xeon_gold_6252n_firmware"},{"vendor":"intel","product":"xeon_gold_6254_firmware"},{"vendor":"intel","product":"xeon_gold_6256_firmware"},{"vendor":"intel","product":"xeon_gold_6258r_firmware"},{"vendor":"intel","product":"xeon_gold_6262v_firmware"},{"vendor":"intel","product":"xeon_platinum_8153_firmware"},{"vendor":"intel","product":"xeon_platinum_8156_firmware"},{"vendor":"intel","product":"xeon_platinum_8158_firmware"},{"vendor":"intel","product":"xeon_platinum_8160_firmware"},{"vendor":"intel","product":"xeon_platinum_8160f_firmware"},{"vendor":"intel","product":"xeon_platinum_8160t_firmware"},{"vendor":"intel","product":"xeon_platinum_8164_firmware"},{"vendor":"intel","product":"xeon_platinum_8168_firmware"},{"vendor":"intel","product":"xeon_platinum_8170_firmware"},{"vendor":"intel","product":"xeon_platinum_8176_firmware"},{"vendor":"intel","product":"xeon_platinum_8176f_firmware"},{"vendor":"intel","product":"xeon_platinum_8180_firmware"},{"vendor":"intel","product":"xeon_platinum_8253_firmware"},{"vendor":"intel","product":"xeon_platinum_8256_firmware"},{"vendor":"intel","product":"xeon_platinum_8260_firmware"},{"vendor":"intel","product":"xeon_platinum_8260l_firmware"},{"vendor":"intel","product":"xeon_platinum_8260y_firmware"},{"vendor":"intel","product":"xeon_platinum_8268_firmware"},{"vendor":"intel","product":"xeon_platinum_8270_firmware"},{"vendor":"intel","product":"xeon_platinum_8276_firmware"},{"vendor":"intel","product":"xeon_platinum_8276l_firmware"},{"vendor":"intel","product":"xeon_platinum_8280_firmware"},{"vendor":"intel","product":"xeon_platinum_8280l_firmware"},{"vendor":"intel","product":"xeon_platinum_9221_firmware"},{"vendor":"intel","product":"xeon_platinum_9222_firmware"},{"vendor":"intel","product":"xeon_platinum_9242_firmware"},{"vendor":"intel","product":"xeon_platinum_9282_firmware"},{"vendor":"intel","product":"xeon_silver_4108_firmware"},{"vendor":"intel","product":"xeon_silver_4109t_firmware"},{"vendor":"intel","product":"xeon_silver_4110_firmware"},{"vendor":"intel","product":"xeon_silver_4112_firmware"},{"vendor":"intel","product":"xeon_silver_4114_firmware"},{"vendor":"intel","product":"xeon_silver_4114t_firmware"},{"vendor":"intel","product":"xeon_silver_4116_firmware"},{"vendor":"intel","product":"xeon_silver_4116t_firmware"},{"vendor":"intel","product":"xeon_silver_4208_firmware"},{"vendor":"intel","product":"xeon_silver_4209t_firmware"},{"vendor":"intel","product":"xeon_silver_4210_firmware"},{"vendor":"intel","product":"xeon_silver_4210r_firmware"},{"vendor":"intel","product":"xeon_silver_4210t_firmware"},{"vendor":"intel","product":"xeon_silver_4214_firmware"},{"vendor":"intel","product":"xeon_silver_4214r_firmware"},{"vendor":"intel","product":"xeon_silver_4214y_firmware"},{"vendor":"intel","product":"xeon_silver_4215_firmware"},{"vendor":"intel","product":"xeon_silver_4215r_firmware"},{"vendor":"intel","product":"xeon_silver_4216_firmware"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00616.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21131"},{"url":"https://github.com/advisories/GHSA-5jmq-jhgh-33jr"},{"url":"https://advisories.mageia.org/MGASA-2022-0193.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30425","tags":["report"]},{"url":"https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220510","tags":["web"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00614.html","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-21131","description":"Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.","status":"published","published":"2022-05-12T16:35:44Z","modified":"2025-05-05T16:39:21.345Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:34:29.478363Z"}],"euvd":[{"id":"EUVD-2022-26378","description":"Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.","status":"published","published":"2022-05-12T16:35:44Z","modified":"2025-05-05T16:39:21Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:56.053822Z"}],"ghsa":[{"id":"GHSA-5jmq-jhgh-33jr","title":"Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to...","description":"Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.","status":"published","published":"2022-05-13T00:00:49Z","modified":"2023-02-01T05:02:23Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:49:53.83549Z"}],"nvd":[{"id":"CVE-2022-21131","description":"Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.","status":"published","published":"2022-05-12T17:15:09.757Z","modified":"2026-06-17T04:25:34.907Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:07:19.51203Z"}],"osv":[{"id":"MGASA-2022-0193","title":"Updated microcode packages fix security vulnerabilities","description":"Updated microcodes for Intel processors, fixing various functional\nissues, and at least the following security issues:\n\nSensitive information accessible by physical probing of JTAG interface\nfor some Intel(R) Processors with SGX may allow an unprivileged user to\npotentially enable information disclosure via physical access\n(CVE-2022-0005).\n\nDescription: Improper access control for some Intel(R) Xeon(R) Processors\nmay allow an authenticated user to potentially enable information disclosure\nvia local access (CVE-2022-21131).\n\nImproper input validation for some Intel(R) Xeon(R) Processors may allow a\nprivileged user to potentially enable denial of service via local access\n(CVE-2022-21136).\n\nProcessor optimization removal or modification of security-critical code for\nsome Intel(R) Processors may allow an authenticated user to potentially enable\ninformation disclosure via local access (CVE-2022-21151).\n\nFor info about the other fixes in this update, see the github reference.\n","status":"published","published":"2022-05-21T08:50:18Z","modified":"2026-04-16T04:41:40.347552991Z","updated_at":"2026-11-02T15:49:41.849028Z"}]}}