CVE-2022-38090 Information disclosure in Intel(R) Processors with Intel(R) Software Guard Extensions (SGX)
A privileged local attacker can exploit improper resource isolation in Intel SGX to disclose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-38090?
CVE-2022-38090 is a medium-severity vulnerability in Intel(R) Processors with Intel(R) Software Guard Extensions (SGX), published on 16 Feb 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access.
Weakness: CWE-922
Which versions are affected by CVE-2022-38090?
It affects 227 products.
Products include Intel Celeron J1750 Firmware, Intel Celeron J1800 Firmware, Intel Celeron J1850 Firmware, Intel Celeron J1900 Firmware, Intel Celeron J3060 Firmware, Intel Celeron J3160 Firmware and 221 more.
How do I fix CVE-2022-38090?
Apply the vendor's patch.
Is CVE-2022-38090 being exploited?
There is no known exploitation of CVE-2022-38090 in the wild and no public exploit code.
Other vulnerabilities in Intel(R) Processors with Intel(R) Software Guard Extensions (SGX)
Sources
Also known as ALPINE-CVE-2022-38090, DEBIAN-CVE-2022-38090, GHSA-p6jp-vhc2-xhh9, UBUNTU-CVE-2022-38090.