CVE catalog

CVE-2023-22655

Intel Microcode vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 6.1CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.25% · Oct 25, 2026

Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianintel-microcodesid3.20260227.1fixed
Debianintel-microcodeforky3.20260227.1fixed
Debianintel-microcodetrixie3.20251111.1~deb13u1fixed
Debianintel-microcodetrixie-security3.20250812.1~deb13u1fixed
Debianintel-microcodebookworm3.20251111.1~deb12u1fixed
Debianintel-microcodebookworm-security3.20250812.1~deb12u1fixed
Ubuntuintel-microcodenoble3.20240312.1~deb12u1fixed
Ubuntuintel-microcodenoble3.20240514.0ubuntu0.24.04.1fixed
Alpineintel-ucode3.1720240813-r0fixed
Alpineintel-ucode3.1820240813-r0fixed
Alpineintel-ucode3.1920240312-r0fixed
Alpineintel-ucode3.2020240312-r0fixed
Alpineintel-ucode3.2120240312-r0fixed
Alpineintel-ucode3.2220240312-r0fixed
Alpineintel-ucode3.2320240312-r0fixed
Alpineintel-ucode3.2420240312-r0fixed
Ubuntuintel-microcodepro3.20170707.1vulnerable
Ubuntuintel-microcodepro3.20171117.1vulnerable
Ubuntuintel-microcodepro3.20180108.1vulnerable
Ubuntuintel-microcodepro3.20180108.1+really20171117.1vulnerable
Ubuntuintel-microcodepro3.20180312.0~ubuntu18.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20180807a.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.18.04.3vulnerable
Ubuntuintel-microcodepro3.20190618.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20191112-0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.18.04.0vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20210216.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20210608.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20220510.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20220809.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20230214.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20230808.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20231114.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20240514.0ubuntu0.18.04.1+esm1fixed
Ubuntuintel-microcode20.043.20190918.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu2vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu3vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.0vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20210216.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20210608.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220510.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220809.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230214.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230808.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20231114.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20240514.0ubuntu0.20.04.1fixed
Ubuntuintel-microcode22.043.20210608.2ubuntu1vulnerable
Ubuntuintel-microcode22.043.20220510.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20220809.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230214.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230808.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20231114.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240514.0ubuntu0.22.04.1fixed
Ubuntuintel-microcode24.043.20230808.1vulnerable
Ubuntuintel-microcode24.043.20231114.0ubuntu1vulnerable
Ubuntuintel-microcode24.043.20231114.1vulnerable
Ubuntuintel-microcode24.043.20240312.1vulnerable
Ubuntuintel-microcode24.043.20240312.1build1vulnerable
Ubuntuintel-microcode24.043.20240514.0ubuntu0.24.04.1fixed
Suseucode-intellinux micro 6.020240813-1.1fixed
Suseucode-intellinux enterprise server 12 sp520240312-134.1fixed
Suseucode-intellinux enterprise server for sap applications 12 sp520240312-134.1fixed
Ubuntuintel-microcodepro3.20170707.1vulnerable
Ubuntuintel-microcodepro3.20171117.1vulnerable
Ubuntuintel-microcodepro3.20180108.1vulnerable
Ubuntuintel-microcodepro3.20180108.1+really20171117.1vulnerable
Ubuntuintel-microcodepro3.20180312.0~ubuntu18.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20180807a.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.18.04.3vulnerable
Ubuntuintel-microcodepro3.20190618.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20191112-0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.18.04.0vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20210216.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20210608.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20220510.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20220809.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20230214.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20230808.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20231114.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20240514.0ubuntu0.18.04.1+esm1fixed
Ubuntuintel-microcode20.043.20190918.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu2vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu3vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.0vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20210216.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20210608.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220510.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220809.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230214.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230808.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20231114.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20240514.0ubuntu0.20.04.1fixed
Ubuntuintel-microcode22.043.20210608.2ubuntu1vulnerable
Ubuntuintel-microcode22.043.20220510.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20220809.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230214.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230808.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20231114.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240514.0ubuntu0.22.04.1fixed
Opensuseucode-inteltumbleweed20240312-1.1fixed
Suseucode-intellinux enterprise micro 5.320240312-150200.38.1fixed
Suseucode-intellinux enterprise micro 5.420240312-150200.38.1fixed
Suseucode-intellinux enterprise micro 5.520240312-150200.38.1fixed
Suseucode-intellinux enterprise module for basesystem 15 sp520240312-150200.38.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp2-ltss20240312-150200.38.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp3-ltss20240312-150200.38.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp4-espos20240312-150200.38.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp4-ltss20240312-150200.38.1fixed
Suseucode-intellinux enterprise server 15 sp2-ltss20240312-150200.38.1fixed
Suseucode-intellinux enterprise server 15 sp3-ltss20240312-150200.38.1fixed
Suseucode-intellinux enterprise server 15 sp4-ltss20240312-150200.38.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp220240312-150200.38.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp320240312-150200.38.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp420240312-150200.38.1fixed
Suseucode-intelmanager proxy 4.320240312-150200.38.1fixed
Suseucode-intelmanager server 4.320240312-150200.38.1fixed
Suseucode-intellinux enterprise micro 5.120240312-150200.38.1fixed
Suseucode-intellinux enterprise micro 5.220240312-150200.38.1fixed
Suseucode-intelenterprise storage 7.120240312-150200.38.1fixed
Opensuseucode-intelleap micro 5.320240312-150200.38.1fixed
Opensuseucode-intelleap micro 5.420240312-150200.38.1fixed
Opensuseucode-intelleap 15.520240312-150200.38.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianintel-microcodesourcesid3.20240312.1not yet assignedNot reported[1066108]
Debianintel-microcodesourceforky3.20240312.1not yet assignedNot reported[1066108]
Debianintel-microcodesourcetrixie3.20240312.1not yet assignedNot reported[1066108]
Debianintel-microcodesourcebookworm3.20240312.1~deb12u1not yet assignedNot reported[1066108]
Ubuntuintel-microcodedebnoble3.20240312.1~deb12u1Not reportedNot reportedNot reported
Ubuntuintel-microcodedebnoble3.20240514.0ubuntu0.24.04.1Not reportedNot reportedNot reported
Alpineintel-ucodeapk3.1720240813-r0Not reportedALPINE-CVE-2023-22655Not reported
Alpineintel-ucodeapk3.1820240813-r0Not reportedALPINE-CVE-2023-22655Not reported
Alpineintel-ucodeapk3.1920240312-r0Not reportedALPINE-CVE-2023-22655Not reported
Alpineintel-ucodeapk3.2020240312-r0Not reportedALPINE-CVE-2023-22655Not reported
Alpineintel-ucodeapk3.2120240312-r0Not reportedALPINE-CVE-2023-22655Not reported
Alpineintel-ucodeapk3.2220240312-r0Not reportedALPINE-CVE-2023-22655Not reported
Alpineintel-ucodeapk3.2320240312-r0Not reportedALPINE-CVE-2023-22655Not reported
Alpineintel-ucodeapk3.2420240312-r0Not reportedALPINE-CVE-2023-22655Not reported
Ubuntuintel-microcodedebpro3.20240514.0ubuntu0.18.04.1+esm1Not reportedUSN-6797-1Not reported
Ubuntuintel-microcodedeb20.043.20240514.0ubuntu0.20.04.1Not reportedUSN-6797-1Not reported
Ubuntuintel-microcodedeb22.043.20240514.0ubuntu0.22.04.1Not reportedUSN-6797-1Not reported
Ubuntuintel-microcodedeb24.043.20240514.0ubuntu0.24.04.1Not reportedUSN-6797-1Not reported
Suseucode-intelrpmlinux micro 6.020240813-1.1Not reportedSUSE-SU-2025:20020-1Not reported
Suseucode-intelrpmlinux enterprise server 12 sp520240312-134.1Not reportedSUSE-SU-2024:0917-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 12 sp520240312-134.1Not reportedSUSE-SU-2024:0917-1Not reported
Ubuntuintel-microcodedebpro3.20240514.0ubuntu0.18.04.1+esm1Not reportedUBUNTU-CVE-2023-22655Not reported
Ubuntuintel-microcodedeb20.043.20240514.0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2023-22655Not reported
Ubuntuintel-microcodedeb22.043.20240514.0ubuntu0.22.04.1Not reportedUBUNTU-CVE-2023-22655Not reported
Opensuseucode-intelrpmtumbleweed20240312-1.1Not reportedOPENSUSE-SU-2024:13769-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.320240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.420240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.520240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise module for basesystem 15 sp520240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp2-ltss20240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp3-ltss20240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp4-espos20240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp4-ltss20240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp2-ltss20240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp3-ltss20240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp4-ltss20240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp220240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp320240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp420240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmmanager proxy 4.320240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmmanager server 4.320240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.120240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.220240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Suseucode-intelrpmenterprise storage 7.120240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Opensuseucode-intelrpmleap micro 5.320240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Opensuseucode-intelrpmleap micro 5.420240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported
Opensuseucode-intelrpmleap 15.520240312-150200.38.1Not reportedSUSE-SU-2024:1139-1Not reported

[Debian bug #1066108]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References