vulnerability

Amazon Linux AMI 2: CVE-2022-33196: Security patch for microcode_ctl (Multiple Advisories)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:M/C:C/I:C/A:N)

Published

Feb 16, 2023

Added

May 13, 2024

Modified

May 20, 2026

Description

Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access.

Solutions

amazon-linux-ami-2-upgrade-microcode_ctlamazon-linux-ami-2-upgrade-microcode_ctl-debuginfo

References

AMAZON-AL2/ALAS-2023-2056
CVE-2022-33196
https://attackerkb.com/topics/CVE-2022-33196
CWE-276
EUVD-EUVD-2022-36240
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36240

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report