CVE-2021-33120
Publication date 9 February 2022
Last updated 24 July 2024
Ubuntu priority
Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.
From the Ubuntu Security Team
Brandon Miller discovered that some Intel processors did not properly restrict access in some situations. This may allow a local authenticated user to obtain sensitive information or allow a remote user to cause a denial of service.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| intel-microcode | ||
| 22.04 LTS jammy |
Fixed 3.20220510.0ubuntu0.22.04.1
|
|
| 20.04 LTS focal |
Fixed 3.20220510.0ubuntu0.20.04.1
|
|
| 18.04 LTS bionic |
Fixed 3.20220510.0ubuntu0.18.04.1
|
|
| 16.04 LTS xenial |
Fixed 3.20220510.0ubuntu0.16.04.1+esm1
|
|
| 14.04 LTS trusty | Ignored end of ESM support, was ignored [early microcode loading not allowed] |
Get expanded security coverage with Ubuntu Pro
Reduce your average CVE exposure time from 98 days to 1 day with expanded CVE patching, ten-years security maintenance and optional support for the full stack of open-source applications. Free for personal use.
Get Ubuntu ProSeverity score breakdown
| Parameter | Value |
|---|---|
| Base score |
5.4 · Medium
|
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | Low |
| Integrity impact | None |
| Availability impact | Low |
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L |
References
Related Ubuntu Security Notices (USN)
- USN-5486-1
- Intel Microcode vulnerabilities
- 20 June 2022
- USN-5535-1
- Intel Microcode vulnerabilities
- 28 July 2022