CVE-2023-23908: Debian Linux

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only; version 12.0 only
• Fedoraproject Fedora: version 37 only; version 38 only
• Intel Microcode: before 20230808 (fixed in 20230808)
• Intel Xeon D-1513n Firmware: affected versions not specified
• Intel Xeon D-1518 Firmware: affected versions not specified
• Intel Xeon D-1520 Firmware: affected versions not specified
• Intel Xeon D-1521 Firmware: affected versions not specified
• Intel Xeon D-1523n Firmware: affected versions not specified
• Intel Xeon D-1527 Firmware: affected versions not specified
• Intel Xeon D-1528 Firmware: affected versions not specified
• Intel Xeon D-1529 Firmware: affected versions not specified
• Intel Xeon D-1531 Firmware: affected versions not specified
• Intel Xeon D-1533n Firmware: affected versions not specified
• Intel Xeon D-1537 Firmware: affected versions not specified
• Intel Xeon D-1539 Firmware: affected versions not specified
• Intel Xeon D-1540 Firmware: affected versions not specified
• Intel Xeon D-1541 Firmware: affected versions not specified
• Intel Xeon D-1543n Firmware: affected versions not specified
• Intel Xeon D-1548 Firmware: affected versions not specified
• Intel Xeon D-1553n Firmware: affected versions not specified
• Intel Xeon D-1557 Firmware: affected versions not specified
• Intel Xeon D-1559 Firmware: affected versions not specified
• Intel Xeon D-1567 Firmware: affected versions not specified
• Intel Xeon D-1571 Firmware: affected versions not specified
• Intel Xeon D-1577 Firmware: affected versions not specified
• and 114 more

Published 2023-08-11. Last modified 2026-06-17.