Ubuntu 22.04 LTS USN-5486-1 Critical: Intel Microcode Threats

ubuntu

June 20, 2022

Several security issues were fixed in Intel Microcode.

Summary

Several security issues were fixed in Intel Microcode.

Software Description:

- intel-microcode: Processor microcode for Intel CPUs

Details:

It was discovered that some Intel processors did not implement sufficient

control flow management. A local attacker could use this to cause a denial

of service. (CVE-2021-0127)

Joseph Nuzman discovered that some Intel processors did not properly

initialise shared resources. A local attacker could use this to obtain

sensitive information. (CVE-2021-0145)

Mark Ermolov, Dmitry Sklyarov and Maxim Goryachy discovered that some Intel

processors did not prevent test and debug logic from being activated at

runtime. A local attacker could use this to escalate

privileges. (CVE-2021-0146)

It was discovered that some Intel processors did not properly restrict

access in some situations. A local attacker could use this to obtain

sensitive information. (CVE-2021-33117)

Brandon Miller discovered that some Intel processors did not properly

restrict acces...

Read the Full Advisory

Topics Covered

security advisory denial of service Ubuntu local attack sensitive information Intel Microcode

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  intel-microcode                 3.20220510.0ubuntu0.22.04.1

Ubuntu 21.10:
  intel-microcode                 3.20220510.0ubuntu0.21.10.1

Ubuntu 20.04 LTS:
  intel-microcode                 3.20220510.0ubuntu0.20.04.1

Ubuntu 18.04 LTS:
  intel-microcode                 3.20220510.0ubuntu0.18.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.