Lucene search

FedoraFEDORA:291C0203D335

HistoryAug 31, 2024 - 2:04 a.m.

[SECURITY] Fedora 40 Update: microcode_ctl-2.1-61.2.fc40

2024-08-3102:04:17

microcode driver

tigran aivazian

volatile update

system boot

cpu

firmware

unix

CVSS3

7.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

CVSS4

7.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

PASSIVE

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

AI Score

Confidence

High

JSON

The microcode_ctl utility is a companion to the microcode driver written by Tigran Aivazian <tigran(a)aivazian.fsnet.co.uk>. The microcode update is volatile and needs to be uploaded on each system boot i.e. it doesn’t reflash your cpu permanently, reboot and it reverts back to the old microcode.

OSVersionArchitecturePackageVersionFilename
Fedora40anymicrocode_ctl< 2.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Fedora	40	any	microcode_ctl	< 2.1	UNKNOWN

CVSS3

7.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

CVSS4

7.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

PASSIVE

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

AI Score

Confidence

High

JSON

Related for FEDORA:291C0203D335