Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 591
Alerts This Week
Warning Icon 1 591

Ubuntu 16.04 ESM USN-5535-1 Critical: Intel Microcode Issues

ubuntu
Calendar Grey July 28, 2022
Dist Ubuntu Esm H88
Crucial patches address multiple Intel firmware issues for Ubuntu 16.04; impacted installations require immediate safety measures.
Several security issues were fixed in Intel Microcode.

Summary

Several security issues were fixed in Intel Microcode.

Software Description:

- intel-microcode: Processor microcode for Intel CPUs

Details:

Joseph Nuzman discovered that some Intel processors did not properly

initialise shared resources. A local attacker could use this to obtain

sensitive information. (CVE-2021-0145)

Mark Ermolov, Dmitry Sklyarov and Maxim Goryachy discovered that some Intel

processors did not prevent test and debug logic from being activated at

runtime. A local attacker could use this to escalate

privileges. (CVE-2021-0146)

It was discovered that some Intel processors did not implement sufficient

control flow management. A local attacker could use this to cause a denial

of service (system crash). (CVE-2021-0127)

It was discovered that some Intel processors did not completely perform

cleanup actions on multi-core shared buffers. A local attacker could

possibly use this to expose sensitive information. (CVE-2022-21123,

CVE-2022-21127)

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security fix Ubuntu system update information disclosure microcode Intel issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
intel-microcode 3.20220510.0ubuntu0.16.04.1+esm1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5535-1

CVE-2021-0127, CVE-2021-0145, CVE-2021-0146, CVE-2021-33117,

CVE-2021-33120, CVE-2022-21123, CVE-2022-21125, CVE-2022-21127,

CVE-2022-21151, CVE-2022-21166

Severity
critical
Lowest
Low
Medium
High
Critical

July 28, 2022

Topics%20covered

Topics Covered

security advisory security fix Ubuntu system update information disclosure microcode Intel issue

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.