Important: microcode_ctl

Issue Overview: An issue was found in redundant REX instruction prefix values affecting third generation Intel Xeon Scalable “Icelake“ processors. The issue may allow a local third-party actor using such instructions to cause a denial of service DOS or achieve privilege escalation. CVE-2023-23583...

Amazon Linux 2023 : microcode_ctl (ALAS2023-2023-436)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-436 advisory. 2024-03-27: CVE-2023-23908 was added to this advisory. An issue was found in redundant REX instruction prefix values affecting third generation Intel Xeon Scalable Icelake processors. The issue...

SUSE: Security Advisory (SUSE-SU-2023:3359-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : microcode_ctl (2023-e1482687dd)

"The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-e1482687dd advisory. - Update to upstream release 20230808 - Update of 06-55-03/0x97 SKX-SP B1 microcode from revision 0x1000171 up to 0x1000181; - Update of...

USN-6286-1: Intel Microcode vulnerabilities

Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 It was discovered that some IntelR XeonR Processor...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2023:3289-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3289-1 advisory. - Updated to Intel CPU Microcode 20230808 release. bsc1214099 - CVE-2022-40982: Fixed a potential security vulnerability in some Intel?...

Improper access control

Improper access control in some 3rd Generation IntelR XeonR Scalable processors may allow a privileged user to potentially enable information disclosure via local access...

SUSE: Security Advisory (SUSE-SU-2023:3289-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-6783 · Intel +6 · Intel Xeon Scalable Processors +6

Name of the Vulnerable Software and Affected Versions: IntelR XeonR Scalable processors affected versions not specified Description: The issue is related to improper access control in some 3rd Generation IntelR XeonR Scalable processors, which may allow a privileged user to potentially enable...

CVE-2023-23908

Improper access control in some 3rd Generation IntelR XeonR Scalable processors may allow a privileged user to potentially enable information disclosure via local access...

openSUSE 15 Security Update : ucode-intel (SUSE-SU-2023:2243-2)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:2243-2 advisory. - Updated to Intel CPU Microcode 20230512 release. bsc1211382. - New platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products...

Fedora 37 : microcode_ctl (2023-b28dc472b0)

"The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-b28dc472b0 advisory. - Update to upstream 2.1-40. 20230516 - Addition of 06-6c-01/0x10 ICL-D B0 microcode at revision 0x1000230; - Addition of 06-8f-04/0x87 SPR-SP E0/S...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2023:2290-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2290-1 advisory. - Updated to Intel CPU Microcode 20230512 release. bsc1211382 - New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Produc...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2023:2289-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2289-1 advisory. - Updated to Intel CPU Microcode 20230512 release. bsc1211382 - New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Produc...

SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2023:2244-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2244-1 advisory. - Updated to Intel CPU Microcode 20230512 release. bsc1211382 - New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Produc...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ucode-intel (SUSE-SU-2023:0568-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0568-1 advisory. Updated to Intel CPU Microcode 20230214 release. Security issues fixed: - CVE-2022-38090: Securi...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2023:0456-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0456-1 advisory. Updated to Intel CPU Microcode 20230214 release. Security issues fixed: - CVE-2022-38090: Security updates for INTEL-SA-00767...

CVE-2022-33972

Incorrect calculation in microcode keying mechanism for some 3rd Generation IntelR XeonR Scalable Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-33972

CVE-2022-33972 concerns Intel microcode on some 3rd Gen Xeon Scalable processors. The root cause is an incorrect calculation in the microcode keying mechanism, which may allow a privileged local user to disclose information. Public records in connected docs confirm this CVE and cite Intel’s advis...

CVE-2022-33972

Incorrect calculation in microcode keying mechanism for some 3rd Generation IntelR XeonR Scalable Processors may allow a privileged user to potentially enable information disclosure via local access...