hw: Intel: 3rd Generation processors may allow information disclosure
Published Aug 11, 2023
6.0
MEDIUMCVSS 3.1
EPSS 0.25%
Description
Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.
Affected products
- Vendor n/a Product 3rd Generation Intel(R) Xeon(R) Scalable processors Defaultunaffected
- Version See referencesStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | 3rd Generation Intel(R) Xeon(R) Scalable processors | unaffected |
|
Configuration 1
Running on/with
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
Configuration 2
- 10.0
- 11.0
- 12.0
- 37
- 38
Configuration 3
- n/a
Running on/with
- n/a
Configuration 4
- n/a
Running on/with
- n/a
Configuration 5
- n/a
Running on/with
- n/a
Configuration 6
- n/a
Running on/with
- n/a
Configuration 7
- n/a
Running on/with
- n/a
Configuration 8
- n/a
Running on/with
- n/a
Configuration 9
- n/a
Running on/with
- n/a
Configuration 10
- n/a
Running on/with
- n/a
Configuration 11
- n/a
Running on/with
- n/a
Configuration 12
- n/a
Running on/with
- n/a
Configuration 13
- n/a
Running on/with
- n/a
Configuration 14
- n/a
Running on/with
- n/a
Configuration 15
- n/a
Running on/with
- n/a
Configuration 16
- n/a
Running on/with
- n/a
Configuration 17
- n/a
Running on/with
- n/a
Configuration 18
- n/a
Running on/with
- n/a
Configuration 19
- n/a
Running on/with
- n/a
Configuration 20
- n/a
Running on/with
- n/a
Configuration 21
- n/a
Running on/with
- n/a
Configuration 22
- n/a
Running on/with
- n/a
Configuration 23
- n/a
Running on/with
- n/a
Configuration 24
- n/a
Running on/with
- n/a
Configuration 25
- n/a
Running on/with
- n/a
Configuration 26
- n/a
Running on/with
- n/a
Configuration 27
- n/a
Running on/with
- n/a
Configuration 28
- n/a
Running on/with
- n/a
Configuration 29
- n/a
Running on/with
- n/a
Configuration 30
- n/a
Running on/with
- n/a
Configuration 31
- n/a
Running on/with
- n/a
Configuration 32
- n/a
Running on/with
- n/a
Configuration 33
- n/a
Running on/with
- n/a
Configuration 34
- n/a
Running on/with
- n/a
Configuration 35
- n/a
Running on/with
- n/a
Configuration 36
- n/a
Running on/with
- n/a
Configuration 37
- n/a
Running on/with
- n/a
Configuration 38
- n/a
Running on/with
- n/a
Configuration 39
- n/a
Running on/with
- n/a
Configuration 40
- n/a
Running on/with
- n/a
Configuration 41
- n/a
Running on/with
- n/a
Configuration 42
- n/a
Running on/with
- n/a
Configuration 43
- n/a
Running on/with
- n/a
Configuration 44
- n/a
Running on/with
- n/a
Configuration 45
- n/a
Running on/with
- n/a
Configuration 46
- n/a
Running on/with
- n/a
Configuration 47
- n/a
Running on/with
- n/a
Configuration 48
- n/a
Running on/with
- n/a
Configuration 49
- n/a
Running on/with
- n/a
Configuration 50
- n/a
Running on/with
- n/a
Configuration 51
- n/a
Running on/with
- n/a
Configuration 52
- n/a
Running on/with
- n/a
Configuration 53
- n/a
Running on/with
- n/a
Configuration 54
- n/a
Running on/with
- n/a
Configuration 55
- n/a
Running on/with
- n/a
Configuration 56
- n/a
Running on/with
- n/a
Configuration 57
- n/a
Running on/with
- n/a
Configuration 58
- n/a
Running on/with
- n/a
Configuration 59
- n/a
Running on/with
- n/a
Configuration 60
- n/a
Running on/with
- n/a
Configuration 61
- n/a
Running on/with
- n/a
Configuration 62
- n/a
Running on/with
- n/a
Configuration 63
- n/a
Running on/with
- n/a
Configuration 64
- n/a
Running on/with
- n/a
Configuration 65
- n/a
Running on/with
- n/a
Configuration 66
- n/a
Running on/with
- n/a
Configuration 67
- n/a
Running on/with
- n/a
Configuration 68
- n/a
Running on/with
- n/a
Configuration 69
- n/a
Running on/with
- n/a
Configuration 70
- n/a
Running on/with
- n/a
Configuration 71
- n/a
Running on/with
- n/a
Configuration 72
- n/a
Running on/with
- n/a
Configuration 73
- n/a
Running on/with
- n/a
Configuration 74
- n/a
Running on/with
- n/a
Configuration 75
- n/a
Running on/with
- n/a
Configuration 76
- n/a
Running on/with
- n/a
Configuration 77
- n/a
Running on/with
- n/a
Configuration 78
- n/a
Running on/with
- n/a
Configuration 79
- n/a
Running on/with
- n/a
Configuration 80
- n/a
Running on/with
- n/a
Configuration 81
- n/a
Running on/with
- n/a
Configuration 82
- n/a
Running on/with
- n/a
Configuration 83
- n/a
Running on/with
- n/a
Configuration 84
- n/a
Running on/with
- n/a
Configuration 85
- n/a
Running on/with
- n/a
Configuration 86
- n/a
Running on/with
- n/a
Configuration 87
- n/a
Running on/with
- n/a
Configuration 88
- n/a
Running on/with
- n/a
Configuration 89
- n/a
Running on/with
- n/a
Configuration 90
- n/a
Running on/with
- n/a
Configuration 91
- n/a
Running on/with
- n/a
Configuration 92
- n/a
Running on/with
- n/a
Configuration 93
- n/a
Running on/with
- n/a
Configuration 94
- n/a
Running on/with
- n/a
Configuration 95
- n/a
Running on/with
- n/a
Configuration 96
- n/a
Running on/with
- n/a
Configuration 97
- n/a
Running on/with
- n/a
Configuration 98
- n/a
Running on/with
- n/a
Configuration 99
- n/a
Running on/with
- n/a
Configuration 100
- n/a
Running on/with
- n/a
Configuration 101
- n/a
Running on/with
- n/a
Configuration 102
- n/a
Running on/with
- n/a
Configuration 103
- n/a
Running on/with
- n/a
Configuration 104
- n/a
Running on/with
- n/a
Configuration 105
- n/a
Running on/with
- n/a
Configuration 106
- n/a
Running on/with
- n/a
Configuration 107
- n/a
Running on/with
- n/a
Configuration 108
- n/a
Running on/with
- n/a
Configuration 109
- n/a
Running on/with
- n/a
Configuration 110
- n/a
Running on/with
- n/a
Configuration 111
- n/a
Running on/with
- n/a
Configuration 112
- n/a
Running on/with
- n/a
Configuration 113
- n/a
Running on/with
- n/a
Configuration 114
- n/a
Running on/with
- n/a
Configuration 115
- n/a
Running on/with
- n/a
Configuration 116
- n/a
Running on/with
- n/a
Configuration 117
- n/a
Running on/with
- n/a
Configuration 118
- n/a
Running on/with
- n/a
Configuration 119
- n/a
Running on/with
- n/a
Configuration 120
- n/a
Running on/with
- n/a
Configuration 121
- n/a
Running on/with
- n/a
Configuration 122
- n/a
Running on/with
- n/a
Configuration 123
- n/a
Running on/with
- n/a
Configuration 124
- n/a
Running on/with
- n/a
Configuration 125
- n/a
Running on/with
- n/a
Configuration 126
- n/a
Running on/with
- n/a
Configuration 127
- n/a
Running on/with
- n/a
Configuration 128
- n/a
Running on/with
- n/a
Configuration 129
- n/a
Running on/with
- n/a
Configuration 130
- n/a
Running on/with
- n/a
Configuration 131
- n/a
Running on/with
- n/a
Configuration 132
- n/a
Running on/with
- n/a
Configuration 133
- n/a
Running on/with
- n/a
Configuration 134
- n/a
Running on/with
- n/a
Configuration 135
- n/a
Running on/with
- n/a
Configuration 136
- n/a
Running on/with
- n/a
Configuration 137
- n/a
Running on/with
- n/a
Configuration 138
- n/a
Running on/with
- n/a
No data.
Red Hat Enterprise Linux 6
microcode_ctl
Will not fix
Red Hat Enterprise Linux 7
microcode_ctl
Affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 8
microcode_ctl
Affected
Red Hat Enterprise Linux 9
kernel
Not affected
Red Hat Enterprise Linux 9
kernel-rt
Not affected
Red Hat Enterprise Linux 9
microcode_ctl
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | microcode_ctl | Will not fix | n/a |
| Red Hat Enterprise Linux 7 | microcode_ctl | Affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | microcode_ctl | Affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | microcode_ctl | Affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Fixed in microcode_ctl-20230808-1.el9 and microcode_ctl-20220809-2.20230808.2.el8_8
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1 other source (CVE.org) ▾
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
NoTechnical Impact
PartialDecision
n/aAssessed Oct 2, 2024 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.
Score over time
2023–2026- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (7 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 2, 2026 | 0.25% (0.00249) | 14.67th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.31% (0.00308) | 22.18th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.06% (0.00063) | 16.81th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.05% (0.00048) | 19.63th | v3 (v2023.03.01) |
| Apr 18, 2024 | 0.04% (0.00045) | 14.32th | v3 (v2023.03.01) |
| Aug 16, 2023 | 0.04% (0.00045) | 12.28th | v3 (v2023.03.01) |
| Aug 11, 2023 | 0.04% (0.00043) | 6.98th | v3 (v2023.03.01) |
References (11)
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-23908 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2230675 Issue Tracking
- https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html Mailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/ Mailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/ Mailing ListThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-23908
- https://security.netapp.com/advisory/ntap-20230824-0003/
- https://www.cve.org/CVERecord?id=CVE-2023-23908
- https://www.debian.org/security/2023/dsa-5474 Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html
Change history (0)
No recorded changes yet.