Intel Xeon 6 Processors Privilege Escalation Vulnerability via SGX or TDX

A vulnerability in some Intel Xeon 6 Processors, specifically in the DDRIO configuration, allows a privileged user to potentially escalate privileges through local access. This issue arises from an improperly implemented security check in the processors' DDRIO configuration when using Intel Software Guard Extensions (SGX) or Intel Trust Domain Extensions (TDX).

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Intel has released microcode updates for the affected Intel Xeon 6 Processors that are currently supported. These microcode updates can be accessed through the Intel Linux Processor Microcode Data Files available on the public Intel GitHub repository. Users are advised to update to the latest firmware version provided by their system manufacturer that addresses this vulnerability.