Описание
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
Updated to Intel CPU Microcode 20220809 release (bsc#1201727):
- CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave (INTEL-SA-00657). See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html
Other fixes:
-
Update for functional issues. See also: https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update
-
Updated Platforms:
Processor Stepping F-M-S/PI Old Ver New Ver Products SKX-SP B1 06-55-03/97 0100015d 0100015e Xeon Scalable SKX-SP H0/M0/U0 06-55-04/b7 02006d05 02006e05 Xeon Scalable SKX-D M1 06-55-04/b7 02006d05 02006e05 Xeon D-21xx ICX-SP D0 06-6a-06/87 0d000363 0d000375 Xeon Scalable Gen3 GLK B0 06-7a-01/01 0000003a 0000003c Pentium Silver N/J5xxx, Celeron N/J4xxx GLK-R R0 06-7a-08/01 0000001e 00000020 Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 ICL-U/Y D1 06-7e-05/80 000000b0 000000b2 Core Gen10 Mobile TGL-R C0 06-8c-02/c2 00000026 00000028 Core Gen11 Mobile TGL-H R0 06-8d-01/c2 0000003e 00000040 Core Gen11 Mobile RKL-S B0 06-a7-01/02 00000053 00000054 Core Gen11 ADL C0 06-97-02/03 0000001f 00000022 Core Gen12 ADL C0 06-97-05/03 0000001f 00000022 Core Gen12 ADL L0 06-9a-03/80 0000041c 00000421 Core Gen12 ADL L0 06-9a-04/80 0000041c 00000421 Core Gen12 ADL C0 06-bf-02/03 0000001f 00000022 Core Gen12 ADL C0 06-bf-05/03 0000001f 00000022 Core Gen12
Список пакетов
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
ucode-intel-20220809-13.101.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
ucode-intel-20220809-13.101.1
SUSE Linux Enterprise Server 12 SP2-BCL
ucode-intel-20220809-13.101.1
SUSE Linux Enterprise Server 12 SP3-BCL
ucode-intel-20220809-13.101.1
SUSE Linux Enterprise Server 12 SP4-LTSS
ucode-intel-20220809-13.101.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
ucode-intel-20220809-13.101.1
SUSE OpenStack Cloud 9
ucode-intel-20220809-13.101.1
SUSE OpenStack Cloud Crowbar 9
ucode-intel-20220809-13.101.1
Ссылки
- Link for SUSE-SU-2022:2838-1
- E-Mail link for SUSE-SU-2022:2838-1
- SUSE Security Ratings
- SUSE Bug 1201727
- SUSE CVE CVE-2022-21233 page
Описание
Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
Затронутые продукты
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ucode-intel-20220809-13.101.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ucode-intel-20220809-13.101.1
SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220809-13.101.1
SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220809-13.101.1
Ссылки
- CVE-2022-21233
- SUSE Bug 1201727