Intel 2024.3 IPU – BIOS Security Updates

Intel has informed HP of potential security vulnerabilities for some Intel® Processors, which might allow escalation of privilege, denial of service or information disclosure. Intel is releasing UEFI firmware updates to mitigate these potential vulnerabilities. Intel has released updates to...

CLSA-2024-1728579854 microcode_ctl: Fix of CVE-2023-31315

Update Intel CPU microcode to 20240813: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c000390; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b0005c0; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...

CentOS 7 : kpatch-patch (RHSA-2020:0028)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0028 advisory. - Improper invalidation for page table updates by a virtual guest operating system for multiple IntelR Processors may allow an authenticated user to...

CentOS 7 : kernel (RHSA-2022:5937)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5937 advisory. - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosu...

The vulnerability of graphic drivers in microprogramming software for Intel processors is related to deficiencies in access control. This allows attackers to trigger a service failure.

The vulnerability of graphic drivers in microprogramming software for Intel processors is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause system failures...

kernel: Possible Denial of Service on Intel(R) Processors

A vulnerability was found in the bus lock regulator mechanism for some Intel processors models. This issue may allow a malicious actor to achieve a Denial of Service attack, impacting the system availability of the targeted host...

Moderate: Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 9. The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: microcodectl: kernel: local privilege escalation on Intel microcode on IntelR XeonR rhel-9.4.0 JIRA:RHEL-30860...

kernel: Local information disclosure in some Intel(R) processors

A vulnerability was found in some Intel processors that may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted host...

intel-microcode: Race conditions in some Intel(R) Processors

A flaw was found in intel-microcode. The hardware logic contains race conditions in some IntelR processors that may allow an authenticated user to enable partial information disclosure via local access...

Important: microcode_ctl

Issue Overview: Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-49141 Insufficient control flow management for some IntelR Xeon Processors may allow an authenticated user t...

Important: microcode_ctl

Issue Overview: Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-49141 Insufficient control flow management for some IntelR Xeon Processors may allow an authenticated user t...

CentOS 9 : microcode_ctl-20240910-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the microcodectl-20240910-1.el9 build changelog. - Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information...

USN-7033-1 intel-microcode vulnerabilities

It was discovered that some IntelR Processors did not properly restrict access to the Running Average Power Limit RAPL interface. This may allow a local privileged attacker to obtain sensitive information. CVE-2024-23984 It was discovered that some IntelR Processors did not properly implement...

USN-7033-1: Intel Microcode vulnerabilities

It was discovered that some IntelR Processors did not properly restrict access to the Running Average Power Limit RAPL interface. This may allow a local privileged attacker to obtain sensitive information. CVE-2024-23984 It was discovered that some IntelR Processors did not properly implement...

hw: cpu: intel: Native Branch History Injection (BHI)

A flaw was found in some Intel CPUs where mitigations for the Spectre V2/BHI vulnerability were incomplete. This issue may allow an attacker to read arbitrary memory, compromising system integrity and exposing sensitive information...

hw: cpu: intel: Native Branch History Injection (BHI)

A flaw was found in some Intel CPUs where mitigations for the Spectre V2/BHI vulnerability were incomplete. This issue may allow an attacker to read arbitrary memory, compromising system integrity and exposing sensitive information...

HPESBHF04688 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01073, Intel Xeon Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20240830 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-22374 |...

HPESBHF04691 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01100, 2024.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20240830 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-24980 |...

OESA-2024-2158 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access.CVE-2024-23984 Improper finite state machines FSMs in...

SUSE: Security Advisory (SUSE-SU-2024:3332-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...