CVE-2022-30539

High

Description

Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

SeverityHigh
CVSS7.5
Exploit probability—
ProductIntel Xeon Gold 5315y Firmware
PublishedFeb 16, 2023
First seenFeb 16, 2023

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
intel xeon_gold_5315y_firmwareNo range specified—
intel xeon_gold_5317_firmwareNo range specified—
intel xeon_gold_5318n_firmwareNo range specified—
intel xeon_gold_5318s_firmwareNo range specified—
intel xeon_gold_5318y_firmwareNo range specified—
intel xeon_gold_5320_firmwareNo range specified—
intel xeon_gold_5320t_firmwareNo range specified—
intel xeon_gold_6312u_firmwareNo range specified—
intel xeon_gold_6314u_firmwareNo range specified—
intel xeon_gold_6326_firmwareNo range specified—
intel xeon_gold_6330_firmwareNo range specified—
intel xeon_gold_6330n_firmwareNo range specified—
intel xeon_gold_6334_firmwareNo range specified—
intel xeon_gold_6336y_firmwareNo range specified—
intel xeon_gold_6338_firmwareNo range specified—
intel xeon_gold_6338n_firmwareNo range specified—
intel xeon_gold_6338t_firmwareNo range specified—
intel xeon_gold_6342_firmwareNo range specified—
intel xeon_gold_6346_firmwareNo range specified—
intel xeon_gold_6348_firmwareNo range specified—
intel xeon_gold_6354_firmwareNo range specified—
intel xeon_platinum_8351n_firmwareNo range specified—
intel xeon_platinum_8352m_firmwareNo range specified—
intel xeon_platinum_8352s_firmwareNo range specified—
intel xeon_platinum_8352v_firmwareNo range specified—
intel xeon_platinum_8352y_firmwareNo range specified—
intel xeon_platinum_8358_firmwareNo range specified—
intel xeon_platinum_8358p_firmwareNo range specified—
intel xeon_platinum_8360y_firmwareNo range specified—
intel xeon_platinum_8362_firmwareNo range specified—
intel xeon_platinum_8368_firmwareNo range specified—
intel xeon_platinum_8368q_firmwareNo range specified—
intel xeon_platinum_8380_firmwareNo range specified—
intel xeon_silver_4309y_firmwareNo range specified—
intel xeon_silver_4310_firmwareNo range specified—
intel xeon_silver_4310t_firmwareNo range specified—
intel xeon_silver_4314_firmwareNo range specified—
intel xeon_silver_4316_firmwareNo range specified—
intel xeon_gold_6330h_firmwareNo range specified—
intel xeon_platinum_8356h_firmwareNo range specified—
intel xeon_platinum_8360h_firmwareNo range specified—
intel xeon_platinum_8360hl_firmwareNo range specified—
intel xeon_gold_5318h_firmwareNo range specified—
intel xeon_gold_5320h_firmwareNo range specified—
intel xeon_gold_6328h_firmwareNo range specified—
intel xeon_gold_6328hl_firmwareNo range specified—
intel xeon_gold_6348h_firmwareNo range specified—
intel xeon_platinum_8353h_firmwareNo range specified—
intel xeon_platinum_8354h_firmwareNo range specified—
intel xeon_platinum_8376h_firmwareNo range specified—
intel xeon_platinum_8376hl_firmwareNo range specified—
intel xeon_platinum_8380h_firmwareNo range specified—
intel xeon_platinum_8380hl_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-30539 · Intel Xeon Gold 5315y Firmware · Dark Radar