CVE catalog

CVE-2023-42667

Intel Microcode vulnerabilities

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.24% · Oct 25, 2026

Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianintel-microcodesid3.20260227.1fixed
Debianintel-microcodeforky3.20260227.1fixed
Debianintel-microcodetrixie3.20251111.1~deb13u1fixed
Debianintel-microcodetrixie-security3.20250812.1~deb13u1fixed
Debianintel-microcodebookworm3.20251111.1~deb12u1fixed
Debianintel-microcodebookworm-security3.20250812.1~deb12u1fixed
Ubuntuintel-microcodenoble3.20240813.1~deb12u1fixed
Ubuntuintel-microcodenoble3.20240813.0ubuntu0.24.04.2fixed
Alpineintel-ucode3.1720240813-r0fixed
Alpineintel-ucode3.1820240813-r0fixed
Alpineintel-ucode3.1920240813-r0fixed
Alpineintel-ucode3.2020240813-r0fixed
Alpineintel-ucode3.2120240813-r0fixed
Alpineintel-ucode3.2220240813-r0fixed
Alpineintel-ucode3.2320240813-r0fixed
Alpineintel-ucode3.2420240813-r0fixed
Ubuntuintel-microcodepro3.20170707.1vulnerable
Ubuntuintel-microcodepro3.20171117.1vulnerable
Ubuntuintel-microcodepro3.20180108.1vulnerable
Ubuntuintel-microcodepro3.20180108.1+really20171117.1vulnerable
Ubuntuintel-microcodepro3.20180312.0~ubuntu18.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20180807a.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.18.04.3vulnerable
Ubuntuintel-microcodepro3.20190618.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20191112-0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.18.04.0vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20210216.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20210608.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20220510.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20220809.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20230214.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20230808.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20231114.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20240514.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20240813.0ubuntu0.18.04.1+esm2fixed
Ubuntuintel-microcode20.043.20190918.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu2vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu3vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.0vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20210216.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20210608.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220510.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220809.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230214.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230808.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20231114.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20240514.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20240813.0ubuntu0.20.04.2fixed
Ubuntuintel-microcode22.043.20210608.2ubuntu1vulnerable
Ubuntuintel-microcode22.043.20220510.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20220809.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230214.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230808.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20231114.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240514.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240813.0ubuntu0.22.04.2fixed
Ubuntuintel-microcode24.043.20230808.1vulnerable
Ubuntuintel-microcode24.043.20231114.0ubuntu1vulnerable
Ubuntuintel-microcode24.043.20231114.1vulnerable
Ubuntuintel-microcode24.043.20240312.1vulnerable
Ubuntuintel-microcode24.043.20240312.1build1vulnerable
Ubuntuintel-microcode24.043.20240514.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20240813.0ubuntu0.24.04.2fixed
Opensuseucode-inteltumbleweed20240813-1.1fixed
Ubuntuintel-microcodepro3.20170707.1vulnerable
Ubuntuintel-microcodepro3.20171117.1vulnerable
Ubuntuintel-microcodepro3.20180108.1vulnerable
Ubuntuintel-microcodepro3.20180108.1+really20171117.1vulnerable
Ubuntuintel-microcodepro3.20180312.0~ubuntu18.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20180807a.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.18.04.3vulnerable
Ubuntuintel-microcodepro3.20190618.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20191112-0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.18.04.0vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20210216.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20210608.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20220510.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20220809.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20230214.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20230808.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20231114.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20240514.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20240813.0ubuntu0.18.04.1+esm2fixed
Ubuntuintel-microcode20.043.20190918.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu2vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu3vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.0vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20210216.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20210608.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220510.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220809.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230214.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230808.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20231114.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20240514.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20240813.0ubuntu0.20.04.2fixed
Ubuntuintel-microcode22.043.20210608.2ubuntu1vulnerable
Ubuntuintel-microcode22.043.20220510.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20220809.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230214.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230808.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20231114.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240514.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240813.0ubuntu0.22.04.2fixed
Ubuntuintel-microcode24.043.20230808.1vulnerable
Ubuntuintel-microcode24.043.20231114.0ubuntu1vulnerable
Ubuntuintel-microcode24.043.20231114.1vulnerable
Ubuntuintel-microcode24.043.20240312.1vulnerable
Ubuntuintel-microcode24.043.20240312.1build1vulnerable
Ubuntuintel-microcode24.043.20240514.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20240813.0ubuntu0.24.04.2fixed
Suseucode-intellinux enterprise micro 5.320240813-150200.44.1fixed
Suseucode-intellinux enterprise micro 5.420240813-150200.44.1fixed
Suseucode-intellinux enterprise micro 5.520240813-150200.44.1fixed
Suseucode-intellinux enterprise module for basesystem 15 sp520240813-150200.44.1fixed
Suseucode-intellinux enterprise module for basesystem 15 sp620240813-150200.44.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp2-ltss20240813-150200.44.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp3-ltss20240813-150200.44.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp4-espos20240813-150200.44.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp4-ltss20240813-150200.44.1fixed
Suseucode-intellinux enterprise server 15 sp2-ltss20240813-150200.44.1fixed
Suseucode-intellinux enterprise server 15 sp3-ltss20240813-150200.44.1fixed
Suseucode-intellinux enterprise server 15 sp4-ltss20240813-150200.44.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp220240813-150200.44.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp320240813-150200.44.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp420240813-150200.44.1fixed
Suseucode-intelmanager proxy 4.320240813-150200.44.1fixed
Suseucode-intelmanager server 4.320240813-150200.44.1fixed
Suseucode-intellinux enterprise micro 5.120240813-150200.44.1fixed
Suseucode-intellinux enterprise micro 5.220240813-150200.44.1fixed
Suseucode-intelenterprise storage 7.120240813-150200.44.1fixed
Opensuseucode-intelleap micro 5.520240813-150200.44.1fixed
Opensuseucode-intelleap 15.520240813-150200.44.1fixed
Opensuseucode-intelleap 15.620240813-150200.44.1fixed
Suseucode-intellinux enterprise server 12 sp520240813-140.1fixed
Suseucode-intellinux enterprise server for sap applications 12 sp520240813-140.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianintel-microcodesourcesid3.20240813.1not yet assignedNot reported[1078742]
Debianintel-microcodesourceforky3.20240813.1not yet assignedNot reported[1078742]
Debianintel-microcodesourcetrixie3.20240813.1not yet assignedNot reported[1078742]
Debianintel-microcodesourcebookworm3.20240813.1~deb12u1not yet assignedNot reported[1078742]
Ubuntuintel-microcodedebnoble3.20240813.1~deb12u1Not reportedNot reportedNot reported
Ubuntuintel-microcodedebnoble3.20240813.0ubuntu0.24.04.2Not reportedNot reportedNot reported
Alpineintel-ucodeapk3.1720240813-r0Not reportedALPINE-CVE-2023-42667Not reported
Alpineintel-ucodeapk3.1820240813-r0Not reportedALPINE-CVE-2023-42667Not reported
Alpineintel-ucodeapk3.1920240813-r0Not reportedALPINE-CVE-2023-42667Not reported
Alpineintel-ucodeapk3.2020240813-r0Not reportedALPINE-CVE-2023-42667Not reported
Alpineintel-ucodeapk3.2120240813-r0Not reportedALPINE-CVE-2023-42667Not reported
Alpineintel-ucodeapk3.2220240813-r0Not reportedALPINE-CVE-2023-42667Not reported
Alpineintel-ucodeapk3.2320240813-r0Not reportedALPINE-CVE-2023-42667Not reported
Alpineintel-ucodeapk3.2420240813-r0Not reportedALPINE-CVE-2023-42667Not reported
Ubuntuintel-microcodedebpro3.20240813.0ubuntu0.18.04.1+esm2Not reportedUSN-6967-1Not reported
Ubuntuintel-microcodedeb20.043.20240813.0ubuntu0.20.04.2Not reportedUSN-6967-1Not reported
Ubuntuintel-microcodedeb22.043.20240813.0ubuntu0.22.04.2Not reportedUSN-6967-1Not reported
Ubuntuintel-microcodedeb24.043.20240813.0ubuntu0.24.04.2Not reportedUSN-6967-1Not reported
Opensuseucode-intelrpmtumbleweed20240813-1.1Not reportedOPENSUSE-SU-2024:14268-1Not reported
Ubuntuintel-microcodedebpro3.20240813.0ubuntu0.18.04.1+esm2Not reportedUBUNTU-CVE-2023-42667Not reported
Ubuntuintel-microcodedeb20.043.20240813.0ubuntu0.20.04.2Not reportedUBUNTU-CVE-2023-42667Not reported
Ubuntuintel-microcodedeb22.043.20240813.0ubuntu0.22.04.2Not reportedUBUNTU-CVE-2023-42667Not reported
Ubuntuintel-microcodedeb24.043.20240813.0ubuntu0.24.04.2Not reportedUBUNTU-CVE-2023-42667Not reported
Suseucode-intelrpmlinux enterprise micro 5.320240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.420240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.520240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise module for basesystem 15 sp520240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise module for basesystem 15 sp620240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp2-ltss20240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp3-ltss20240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp4-espos20240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp4-ltss20240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp2-ltss20240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp3-ltss20240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp4-ltss20240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp220240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp320240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp420240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmmanager proxy 4.320240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmmanager server 4.320240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.120240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.220240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmenterprise storage 7.120240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Opensuseucode-intelrpmleap micro 5.520240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Opensuseucode-intelrpmleap 15.520240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Opensuseucode-intelrpmleap 15.620240813-150200.44.1Not reportedSUSE-SU-2024:3095-1Not reported
Suseucode-intelrpmlinux enterprise server 12 sp520240813-140.1Not reportedSUSE-SU-2024:2941-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 12 sp520240813-140.1Not reportedSUSE-SU-2024:2941-1Not reported

[Debian bug #1078742]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Details (1)
    • 3.20251111.1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.20240813.1~deb12u1

      usn · intel-microcode · debian · bookworm; usn · intel-microcode · debian · 12

[Debian 13 (Trixie)]

  • Details (1)
    • 3.20251111.1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.20240813.1

      usn · intel-microcode · debian · 13

[openSUSE Tumbleweed]

  • Source package: [ucode-intel]

    Details (1)
    • 20260812-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 20240813-1.1

      usn · ucode-intel · opensuse · tumbleweed

Observed:

References