CVE-2021-33117
Fixed in a distro release EPSS <1%CVSS 5.5
Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.
Products: intel bios, netapp fas/aff_bios
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | microcode_ctl | 2:2.1-47.amzn2.0.11 |
| Amazon Linux 2023 | microcode_ctl | 2:2.1-53.amzn2023 |
| Debian 12 | intel-microcode | 3.20220207.1 |
| Debian 13 | intel-microcode | 3.20220207.1 |
| Debian 14 | intel-microcode | 3.20220207.1 |
| Ubuntu 18.04 LTS | intel-microcode | 3.20220510.0ubuntu0.18.04.1 |
| Ubuntu 20.04 LTS | intel-microcode | 3.20220510.0ubuntu0.20.04.1 |
| Ubuntu 22.04 LTS | intel-microcode | 3.20220510.0ubuntu0.22.04.1 |
| Ubuntu Pro 14.04 LTS | intel-microcode | no fix |
| Ubuntu Pro 16.04 LTS | intel-microcode | 3.20220510.0ubuntu0.16.04.1+esm1 |