CVE catalog

CVE-2022-21216

intel-microcode: CVE-2022-21216

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.54% · Oct 25, 2026

Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianintel-microcodesid3.20260227.1fixed
Debianintel-microcodeforky3.20260227.1fixed
Debianintel-microcodetrixie3.20251111.1~deb13u1fixed
Debianintel-microcodetrixie-security3.20250812.1~deb13u1fixed
Debianintel-microcodebookworm3.20251111.1~deb12u1fixed
Debianintel-microcodebookworm-security3.20250812.1~deb12u1fixed
Ubuntuintel-microcodepro3.20150121.1vulnerable
Ubuntuintel-microcodepro3.20151106.1vulnerable
Ubuntuintel-microcodepro3.20170707.1~ubuntu16.04.0vulnerable
Ubuntuintel-microcodepro3.20180108.0~ubuntu16.04.2vulnerable
Ubuntuintel-microcodepro3.20180108.0+really20170707ubuntu16.04.1vulnerable
Ubuntuintel-microcodepro3.20180312.0~ubuntu16.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20180807a.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20190618.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20191112-0ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.16.04.0vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20210216.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20210608.0ubuntu0.16.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20220510.0ubuntu0.16.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20230214.0ubuntu0.16.04.1+esm1fixed
Ubuntuintel-microcode18.043.20170707.1vulnerable
Ubuntuintel-microcode18.043.20171117.1vulnerable
Ubuntuintel-microcode18.043.20180108.1vulnerable
Ubuntuintel-microcode18.043.20180108.1+really20171117.1vulnerable
Ubuntuintel-microcode18.043.20180312.0~ubuntu18.04.1vulnerable
Ubuntuintel-microcode18.043.20180425.1~ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20180425.1~ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20180807a.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20190514.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20190514.0ubuntu0.18.04.3vulnerable
Ubuntuintel-microcode18.043.20190618.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20191112-0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20191115.1ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20191115.1ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20200609.0ubuntu0.18.04.0vulnerable
Ubuntuintel-microcode18.043.20200609.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20201110.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20201110.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20210216.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20210608.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20220510.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20220809.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20230214.0ubuntu0.18.04.1fixed
Ubuntuintel-microcode20.043.20190918.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu2vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu3vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.0vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20210216.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20210608.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220510.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220809.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230214.0ubuntu0.20.04.1fixed
Ubuntuintel-microcode22.043.20210608.2ubuntu1vulnerable
Ubuntuintel-microcode22.043.20220510.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20220809.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230214.0ubuntu0.22.04.1fixed
Suseucode-intellinux enterprise micro 5.320230214-150200.21.1fixed
Suseucode-intellinux enterprise module for basesystem 15 sp420230214-150200.21.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp2-ltss20230214-150200.21.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp3-espos20230214-150200.21.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp3-ltss20230214-150200.21.1fixed
Suseucode-intellinux enterprise real time 15 sp320230214-150200.21.1fixed
Suseucode-intellinux enterprise server 15 sp2-ltss20230214-150200.21.1fixed
Suseucode-intellinux enterprise server 15 sp3-ltss20230214-150200.21.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp220230214-150200.21.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp320230214-150200.21.1fixed
Suseucode-intelmanager proxy 4.220230214-150200.21.1fixed
Suseucode-intelmanager server 4.220230214-150200.21.1fixed
Suseucode-intellinux enterprise micro 5.120230214-150200.21.1fixed
Suseucode-intellinux enterprise micro 5.220230214-150200.21.1fixed
Suseucode-intelenterprise storage 720230214-150200.21.1fixed
Suseucode-intelenterprise storage 7.120230214-150200.21.1fixed
Opensuseucode-intelleap micro 5.320230214-150200.21.1fixed
Opensuseucode-intelleap 15.420230214-150200.21.1fixed
Opensuseucode-inteltumbleweed20230214-1.1fixed
Suseucode-intellinux enterprise server 12 sp520230214-3.49.1fixed
Suseucode-intellinux enterprise server for sap applications 12 sp520230214-3.49.1fixed
Ubuntuintel-microcodepro3.20150121.1vulnerable
Ubuntuintel-microcodepro3.20151106.1vulnerable
Ubuntuintel-microcodepro3.20170707.1~ubuntu16.04.0vulnerable
Ubuntuintel-microcodepro3.20180108.0~ubuntu16.04.2vulnerable
Ubuntuintel-microcodepro3.20180108.0+really20170707ubuntu16.04.1vulnerable
Ubuntuintel-microcodepro3.20180312.0~ubuntu16.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20180807a.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20190618.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20191112-0ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.16.04.0vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20210216.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20210608.0ubuntu0.16.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20220510.0ubuntu0.16.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20230214.0ubuntu0.16.04.1+esm1fixed
Ubuntuintel-microcode18.043.20170707.1vulnerable
Ubuntuintel-microcode18.043.20171117.1vulnerable
Ubuntuintel-microcode18.043.20180108.1vulnerable
Ubuntuintel-microcode18.043.20180108.1+really20171117.1vulnerable
Ubuntuintel-microcode18.043.20180312.0~ubuntu18.04.1vulnerable
Ubuntuintel-microcode18.043.20180425.1~ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20180425.1~ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20180807a.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20190514.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20190514.0ubuntu0.18.04.3vulnerable
Ubuntuintel-microcode18.043.20190618.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20191112-0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20191115.1ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20191115.1ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20200609.0ubuntu0.18.04.0vulnerable
Ubuntuintel-microcode18.043.20200609.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20201110.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20201110.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20210216.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20210608.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20220510.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20220809.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20230214.0ubuntu0.18.04.1fixed
Ubuntuintel-microcode20.043.20190918.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu2vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu3vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.0vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20210216.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20210608.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220510.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220809.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230214.0ubuntu0.20.04.1fixed
Ubuntuintel-microcode22.043.20210608.2ubuntu1vulnerable
Ubuntuintel-microcode22.043.20220510.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20220809.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230214.0ubuntu0.22.04.1fixed
Suseucode-intelopenstack cloud 920230214-13.104.1fixed
Suseucode-intelopenstack cloud crowbar 920230214-13.104.1fixed
Suseucode-intellinux enterprise server for sap applications 12 sp420230214-13.104.1fixed
Suseucode-intellinux enterprise server 12 sp2-bcl20230214-13.104.1fixed
Suseucode-intellinux enterprise server 12 sp4-ltss20230214-13.104.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp1-ltss20230214-150100.3.217.1fixed
Suseucode-intellinux enterprise server 15 sp1-ltss20230214-150100.3.217.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp120230214-150100.3.217.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianintel-microcodesourcesid3.20230214.1not yet assignedNot reported[1031334]
Debianintel-microcodesourceforky3.20230214.1not yet assignedNot reported[1031334]
Debianintel-microcodesourcetrixie3.20230214.1not yet assignedNot reported[1031334]
Debianintel-microcodesourcebookworm3.20230214.1not yet assignedNot reported[1031334]
Ubuntuintel-microcodedebpro3.20230214.0ubuntu0.16.04.1+esm1Not reportedUSN-5886-1Not reported
Ubuntuintel-microcodedeb18.043.20230214.0ubuntu0.18.04.1Not reportedUSN-5886-1Not reported
Ubuntuintel-microcodedeb20.043.20230214.0ubuntu0.20.04.1Not reportedUSN-5886-1Not reported
Ubuntuintel-microcodedeb22.043.20230214.0ubuntu0.22.04.1Not reportedUSN-5886-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.320230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmlinux enterprise module for basesystem 15 sp420230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp2-ltss20230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp3-espos20230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp3-ltss20230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmlinux enterprise real time 15 sp320230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp2-ltss20230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp3-ltss20230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp220230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp320230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmmanager proxy 4.220230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmmanager server 4.220230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.120230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.220230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmenterprise storage 720230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Suseucode-intelrpmenterprise storage 7.120230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Opensuseucode-intelrpmleap micro 5.320230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Opensuseucode-intelrpmleap 15.420230214-150200.21.1Not reportedSUSE-SU-2023:0568-1Not reported
Opensuseucode-intelrpmtumbleweed20230214-1.1Not reportedOPENSUSE-SU-2024:12704-1Not reported
Suseucode-intelrpmlinux enterprise server 12 sp520230214-3.49.1Not reportedSUSE-SU-2023:0456-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 12 sp520230214-3.49.1Not reportedSUSE-SU-2023:0456-1Not reported
Ubuntuintel-microcodedebpro3.20230214.0ubuntu0.16.04.1+esm1Not reportedUBUNTU-CVE-2022-21216Not reported
Ubuntuintel-microcodedeb18.043.20230214.0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2022-21216Not reported
Ubuntuintel-microcodedeb20.043.20230214.0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2022-21216Not reported
Ubuntuintel-microcodedeb22.043.20230214.0ubuntu0.22.04.1Not reportedUBUNTU-CVE-2022-21216Not reported
Suseucode-intelrpmopenstack cloud 920230214-13.104.1Not reportedSUSE-SU-2023:0455-1Not reported
Suseucode-intelrpmopenstack cloud crowbar 920230214-13.104.1Not reportedSUSE-SU-2023:0455-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 12 sp420230214-13.104.1Not reportedSUSE-SU-2023:0455-1Not reported
Suseucode-intelrpmlinux enterprise server 12 sp2-bcl20230214-13.104.1Not reportedSUSE-SU-2023:0455-1Not reported
Suseucode-intelrpmlinux enterprise server 12 sp4-ltss20230214-13.104.1Not reportedSUSE-SU-2023:0455-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp1-ltss20230214-150100.3.217.1Not reportedSUSE-SU-2023:0454-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp1-ltss20230214-150100.3.217.1Not reportedSUSE-SU-2023:0454-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp120230214-150100.3.217.1Not reportedSUSE-SU-2023:0454-1Not reported

[Debian bug #1031334]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Details (1)
    • 3.20251111.1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.20230214.1

      dsa · intel-microcode · debian · bookworm

[openSUSE Tumbleweed]

  • Source package: [ucode-intel]

    Details (1)
    • 20260812-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 20230214-1.1

      dsa · ucode-intel · opensuse · tumbleweed

Observed:

References