Amazon Linux 2023 : microcode_ctl (ALAS2023-2024-716)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-716 advisory. 2024-09-26: CVE-2024-22374 was added to this advisory. Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of...

OESA-2024-2140 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Improper isolation in the IntelR CoreTM Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2023-42667 Improper isolation in...

SUSE CVE-2024-23984

Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

SUSE CVE-2024-24968

Improper finite state machines FSMs in hardware logic in some IntelR Processors may allow an privileged user to potentially enable a denial of service via local access...

HPESBHF04701 rev.2 - Certain HPE ProLiant DL/ML/XL, Alletra, Synergy, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01097, 2024.3 IPU - Intel Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server - Prior to v2.2008-07-2024 HPE ProLiant DL360 Gen10 Plus server - Prior to v2.2008-07-2024 HPE ProLiant DL380 Gen10 Plus server - Prio...

PT-2024-7327 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper input validation in the UEFI firmware error handler for some IntelR Processors. This may allow a privileged user to potentially enable escalation ...

PT-2024-7303 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to a NULL pointer dereference in the UEFI firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege...

PT-2024-7297

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an observable discrepancy in the RAPL interface for some IntelR Processors, which may allow a privileged user to potentially enable information disclosure...

PT-2024-7299 · Intel · Intel Uefi Firmware

Name of the Vulnerable Software and Affected Versions: Intel UEFI firmware affected versions not specified Description: A race condition in the UEFI firmware for some Intel processors may allow a privileged user to potentially enable escalation of privilege via local access. This issue is caused ...

PT-2024-7328 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper access control in UEFI firmware for some IntelR Processors, which may allow a privileged user to potentially enable escalation of privilege via...

PT-2024-7300

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper finite state machines FSMs in hardware logic, which may allow a privileged user to potentially enable a denial of service via local access. The...

openSUSE Security Advisory (SUSE-SU-2024:3095-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Intel chipset lock-up DoS

The vulnerability of the chipset lock-up mechanism for certain models of Intel processors is related to a failure in the protection mechanism. Exploiting this vulnerability could allow an attacker to trigger a service failure...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ucode-intel (SUSE-SU-2024:3095-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3095-1 advisory. - Intel CPU Microcode was updated to the 20240813 release bsc1229129 - CVE-2024-24853: Security...

kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

USN-6967-1 intel-microcode vulnerabilities

It was discovered that some Intel® Core™ Ultra Processors did not properly isolate the stream cache. A local authenticated user could potentially use this to escalate their privileges. CVE-2023-42667 It was discovered that some Intel® Processors did not properly isolate the stream cache. A local...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2024:2941-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2941-1 advisory. - Intel CPU Microcode was updated to the 20240813 release bsc1229129 - CVE-2024-24853: Security updates for INTEL- SA-01083 -...

SUSE CVE-2023-49141

Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access...

DEBIAN-CVE-2024-24853

Incorrect behavior order in transition between executive monitor and SMI transfer monitor STM in some IntelR Processor may allow a privileged user to potentially enable escalation of privilege via local access...

ALPINE-CVE-2024-24853

Incorrect behavior order in transition between executive monitor and SMI transfer monitor STM in some IntelR Processor may allow a privileged user to potentially enable escalation of privilege via local access...