Moderate: Red Hat Security Advisory: microcode_ctl security update

An update for microcodectl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

kernel: Local information disclosure in some Intel(R) processors

A vulnerability was found in some Intel processors that may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted host...

kernel: Possible Denial of Service on Intel(R) Processors

A vulnerability was found in the bus lock regulator mechanism for some Intel processors models. This issue may allow a malicious actor to achieve a Denial of Service attack, impacting the system availability of the targeted host...

RHEL 9 : microcode_ctl (RHSA-2024:9401)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:9401 advisory. The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: local privilege escalation on Inte...

HPESBHF04750 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01076, UPLR1 - Intel TDX Seamldr Software Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to v2.2005-29-2024 HPE StoreEasy 1470 Storage - Prior to v2.2005-29-2024 HPE StoreEasy 1570 Performance - Prior to v2.2005-29-2024 HPE...

HPESBHF04740 rev.1 - Certain HPE StoreEasy servers Using Certain Intel Processors, INTEL-SA-01111, UPLR2 - Intel ACTM Module Software Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Storage - Prior to v2.3008-09-2024 HPE StoreEasy 1470 Performance - Prior to v2.3008-09-2024 HPE StoreEasy 1570 Storage - Prior to v2.3008-09-2024 HPE...

2024.3 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-24968 Description: Improper finite state machines FSMs in hardware logic in some...

PT-2024-8769 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel processors 4th Generation and 5th Generation Description: The issue is related to a Time-of-check Time-of-use Race Condition in the Intel Alias Checking Trusted Module Intel ACTM component of Intel microcode. This condition arises from...

Moderate: microcode_ctl security update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: local privilege escalation on Intel microcode on IntelR XeonR CVE-2023-22655 kernel: Local information disclosure on IntelR AtomR processors CVE-2023-28746 kernel: Local information disclosur...

HPESBHF04730 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Synergy, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01101, - Intel Xeon Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to 2.3008-09-2024 HPE Alletra 4120 - Prior to 2.3008-09-2024 HPE Alletra 4140 - Prior to 2.3008-09-2024 HPE ProLiant DL110 Gen11 - Prior to 2.3008-09-20...

HPESBHF04742 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01079, Intel Xeon Processor with Intel SGX Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Storage - Prior to 2.3008-09-2024 HPE StoreEasy 1470 Performance - Prior to 2.3008-09-2024 HPE StoreEasy 1570 Storage - Prior to 2.3008-09-2024 HPE StoreEas...

ALSA-2024:9401 Moderate: microcode_ctl security update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: local privilege escalation on Intel microcode on IntelR XeonR CVE-2023-22655 kernel: Local information disclosure on IntelR AtomR processors CVE-2023-28746 kernel: Local information disclosur...

2024.3 IPU - UEFI Firmware Advisory

Summary: Potential security vulnerabilities in UEFI firmware for some Intel® Processors may allow escalation of privilege, denial of service or information disclosure. Intel is releasing UEFI firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-4277...

PT-2024-8768 · Intel · Intel Actm

Name of the Vulnerable Software and Affected Versions: IntelR processors with IntelR ACTM affected versions not specified Description: The issue is related to the exposure of a resource to the wrong sphere in some IntelR processors with IntelR ACTM, which may allow a privileged user to potentiall...

HPESBHF04739 rev.1- Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01101, Intel Xeon Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Storage - Prior to v2.3008-09-2024 HPE StoreEasy 1470 Performance - Prior to v2.3008-09-2024 HPE StoreEasy 1570 Storage - Prior to v2.3008-09-2024 HPE StoreEa...

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

Important: microcode_ctl

Issue Overview: Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-21820 Improper finite state machines FSMs in the hardware logic ...

hw: cpu: intel: Native Branch History Injection (BHI)

A flaw was found in some Intel CPUs where mitigations for the Spectre V2/BHI vulnerability were incomplete. This issue may allow an attacker to read arbitrary memory, compromising system integrity and exposing sensitive information...

hw: cpu: intel: Native Branch History Injection (BHI)

A flaw was found in some Intel CPUs where mitigations for the Spectre V2/BHI vulnerability were incomplete. This issue may allow an attacker to read arbitrary memory, compromising system integrity and exposing sensitive information...