CVE-2021-33120 Information disclosure in Intel Atom(R) Processors
Authenticated users can exploit a microarchitectural flaw in Intel Atom processors to disclose information or cause denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-33120?
CVE-2021-33120 is a medium-severity vulnerability in Intel Atom(R) Processors, published on 9 Feb 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.
Weakness: CWE-125
Which versions are affected by CVE-2021-33120?
It affects 25 products.
Products include Intel Atom P5921b Firmware, Intel Atom P5931b Firmware, Intel Atom P5942b Firmware, Intel Atom P5962b Firmware, Intel Atom X6200fe Firmware, Intel Atom X6211e Firmware and 19 more.
How do I fix CVE-2021-33120?
Apply the vendor's patch.
Is CVE-2021-33120 being exploited?
There is no known exploitation of CVE-2021-33120 in the wild and no public exploit code.
Other vulnerabilities in Intel Atom(R) Processors
Sources
Also known as DEBIAN-CVE-2021-33120, GHSA-43wc-84x4-9vfc, UBUNTU-CVE-2021-33120.