openSUSE 15 Security Update : ucode-intel (openSUSE-SU-2021:1933-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1933-1 advisory. - Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local...

ALPINE-CVE-2021-28692

inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPUs issuing such commands. In the current implementation in Xen, asynchronous notification of the completion of such commands is not used. Instead, the issuing CPU...

SUSE SLES11 Security Update : microcode_ctl (SUSE-SU-2021:14758-1)

The remote SUSE Linux SLES11 / SLESSAP11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14758-1 advisory. Updated to Intel CPU Microcode 20210525 release: - CVE-2020-24513: A domain bypass transient execution vulnerability was discovere...

openSUSE 15 Security Update : ucode-intel (openSUSE-SU-2021:0876-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:0876-1 advisory. - Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local...

OracleVM 3.4 : xen (OVMSA-2021-0020)

The remote OracleVM system is missing necessary patches to address security updates: - Observable response discrepancy in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access. CVE-2021-0089 - Potential speculative code store bypass in a...

Amazon Linux 2 : microcode_ctl (ALAS-2021-1663)

The version of microcodectl installed on the remote host is prior to 2.1-47. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1663 advisory. A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the...

RHEL 8 : microcode_ctl (RHSA-2021:2308)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2308 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

CentOS 8 : microcode_ctl (CESA-2021:2308)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:2308 advisory. - hw: vt-d related privilege escalation CVE-2020-24489 - hw: improper isolation of shared resources in some Intel Processors CVE-2020-24511 - hw:...

RHEL 7 : microcode_ctl (RHSA-2021:2300)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2300 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

RHEL 8 : microcode_ctl (RHSA-2021:2306)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2306 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

Scientific Linux Security Update : microcode_ctl on SL7.x x86_64 (2021:2305)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:2305-1 advisory. - hw: vt-d related privilege escalation CVE-2020-24489 - hw: improper isolation of shared resources in some Intel Processors CVE-2020-24511 - hw:...

MGASA-2021-0256 Updated microcode packages fix security vulnerabilities

Updated microcodes for Intel processors, fixing various functional issues, and at least the following security issues: Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access CVE-2020-24489. Improper isolation ...

Updated microcode packages fix security vulnerabilities

Updated microcodes for Intel processors, fixing various functional issues, and at least the following security issues: Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access CVE-2020-24489. Improper isolation ...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2021:1930-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1930-1 advisory. Updated to Intel CPU Microcode 20210608 release. - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered...

SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2021:1931-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1931-1 advisory. Updated to Intel CPU Microcode 20210608 release. - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered...

Information Disclosure

microcode is vulnerable to information disclosure. An observable timing discrepancy in some IntelR Processors allows an authenticated user to obtain confidential information local access...

Information Disclosure

microcode is vulnerable to information disclosure. Improper isolation of shared resources in some IntelR Processors allows an authenticated user obtainc onfidential information disclosure via local access...

SUSE SLES11 Security Update : microcode_ctl (SUSE-SU-2020:14546-1)

The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14546-1 advisory. - Observable discrepancy in the RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information...

SUSE SLES11 Security Update : microcode_ctl (SUSE-SU-2020:14394-1)

The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14394-1 advisory. - Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially...

SUSE SLES11 Security Update : xen (SUSE-SU-2020:14521-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14521-1 advisory. - Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially...