CVE-2022-41804 Privilege escalation in Intel(R) Xeon(R) Processors

High 7.2 Published 11 Aug 2023 Updated 13 Feb 2025

A privileged local attacker can exploit unauthorized error injection in Intel SGX or TDX to escalate privileges on Intel Xeon processors.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2022-41804?

CVE-2022-41804 is a high-severity vulnerability in Debian Debian Linux, published on 11 Aug 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Weakness: CWE-1334

Which versions are affected by CVE-2022-41804?

It affects 192 products.

Linux distribution packages (8)

`microcode_ctl` Red Hat:enterprise_linux:7::client	All versions	`2:2.1-73.19.el7_9`
`microcode_ctl-debuginfo` Red Hat:enterprise_linux:7::client	All versions	`2:2.1-73.19.el7_9`
`microcode_ctl` Red Hat:enterprise_linux:7::server	All versions	`2:2.1-73.19.el7_9`
`microcode_ctl-debuginfo` Red Hat:enterprise_linux:7::server	All versions	`2:2.1-73.19.el7_9`
`microcode_ctl` Red Hat:enterprise_linux:7::workstation	All versions	`2:2.1-73.19.el7_9`
`microcode_ctl-debuginfo` Red Hat:enterprise_linux:7::workstation	All versions	`2:2.1-73.19.el7_9`
`microcode_ctl` Red Hat:enterprise_linux:8::baseos	All versions	`4:20220809-2.20230808.2.el8_8`
`microcode_ctl` Red Hat:enterprise_linux:9::baseos	All versions	`4:20220809-2.20230808.2.el9_2`

Products include Debian Debian Linux, Fedoraproject Fedora, Intel Xeon Bronze 3408u Firmware, Intel Xeon D-1513n Firmware, Intel Xeon D-1518 Firmware, Intel Xeon D-1520 Firmware and 186 more.

How do I fix CVE-2022-41804?

Apply the vendor's patch.

Is CVE-2022-41804 being exploited?

There is no known exploitation of CVE-2022-41804 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as ALPINE-CVE-2022-41804, CLSA-2026-1770215200, DEBIAN-CVE-2022-41804, GHSA-5vqh-8734-g6m4, RHBA-2023:5620, RHEA-2023:4995 and 2 more.