Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Details
- CVSS 4.0 Base Score: 8.5 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade microcode_ctlUpgrade microcode_ctl-debuginfo | Dec 12, 2024 | Nov 13, 2024 |
| Amazon_linux | — | Upgrade microcode_ctl | Dec 12, 2024 | Oct 28, 2024 |
| Debian | — | Upgrade intel-microcode | Dec 27, 2024 | Nov 13, 2024 |
| Dell Poweredge Dsa2024308 | — | Upgrade Dell PowerEdge to the latest version | Oct 23, 2025 | Aug 13, 2024 |
| Freebsd | — | Upgrade cpu-microcode-intel | Nov 14, 2024 | Sep 10, 2024 |
| Suse | — | Upgrade ucode-intelUpgrade microcode_ctl | Dec 5, 2025 | Nov 15, 2024 |
| Ubuntu | — | Upgrade intel-microcodeUpgrade intel-microcode (Ubuntu Pro) | Dec 11, 2024 | Nov 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub