Test ID:	1.3.6.1.4.1.25623.1.1.4.2022.2832.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2022:2832-1)
Summary:	The remote host is missing an update for the 'ucode-intel' package(s) announced via the SUSE-SU-2022:2832-1 advisory.
Description:	Summary: The remote host is missing an update for the 'ucode-intel' package(s) announced via the SUSE-SU-2022:2832-1 advisory. Vulnerability Insight: This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release (bsc#1201727): - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave (INTEL-SA-00657). See also: [link moved to references] Other fixes: - Update for functional issues. See also: [link moved to references] - Updated Platforms: Processor Stepping F-M-S/PI Old Ver New Ver Products :---------------:---------:------------:---------:---------:--------- SKX-SP B1 06-55-03/97 0100015d 0100015e Xeon Scalable SKX-SP H0/M0/U0 06-55-04/b7 02006d05 02006e05 Xeon Scalable SKX-D M1 06-55-04/b7 02006d05 02006e05 Xeon D-21xx ICX-SP D0 06-6a-06/87 0d000363 0d000375 Xeon Scalable Gen3 GLK B0 06-7a-01/01 0000003a 0000003c Pentium Silver N/J5xxx, Celeron N/J4xxx GLK-R R0 06-7a-08/01 0000001e 00000020 Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 ICL-U/Y D1 06-7e-05/80 000000b0 000000b2 Core Gen10 Mobile TGL-R C0 06-8c-02/c2 00000026 00000028 Core Gen11 Mobile TGL-H R0 06-8d-01/c2 0000003e 00000040 Core Gen11 Mobile RKL-S B0 06-a7-01/02 00000053 00000054 Core Gen11 ADL C0 06-97-02/03 0000001f 00000022 Core Gen12 ADL C0 06-97-05/03 0000001f 00000022 Core Gen12 ADL L0 06-9a-03/80 0000041c 00000421 Core Gen12 ADL L0 06-9a-04/80 0000041c 00000421 Core Gen12 ADL C0 06-bf-02/03 0000001f 00000022 Core Gen12 ADL C0 06-bf-05/03 0000001f 00000022 Core Gen12 ------------------------------------------------------------------ Affected Software/OS: 'ucode-intel' package(s) on SUSE Linux Enterprise Server 15-SP1, SUSE Linux Enterprise Server for SAP Applications 15-SP1. Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-21233 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html https://lists.debian.org/debian-lts-announce/2023/04/msg00000.html
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.