microcode_ctl security, bug fix and enhancement update

3:1.17-33.26.0.1 - update 06-2d-07 to 0x71a - update 06-55-04 to 0x2006906 - update 06-55-07 to 0x5002f01 - merge Oracle changes for early load via dracut - enable late load on install for UEK4 kernels marked safe except BDW-79 - set earlymicrocode='no' in virtualized guests to avoid early load...

Debian DSA-4701-1 : intel-microcode - security update

This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for the Special Register Buffer Data Sampling CVE-2020-0543 , Vector Register Sampling CVE-2020-0548 and L1D Eviction Sampling CVE-2020-0549 hardware vulnerabilities. The microcode update for HEDT and Xe...

USN-4393-1: Linux kernel vulnerabilities

It was discovered that the Marvell WiFi-Ex Driver in the Linux kernel did not properly validate status lengths in messages received from an access point, leading to a buffer overflow. A physically proximate attacker controlling an access point could use this to construct messages that could...

MGASA-2020-0229 Updated microcode packages fix security issues

This microcode updates provides new microcode versions for the following Intel Ice Lake and Sandy Bride family processors: Processor Stepping Model Update Name - ICL-U/Y D1 6-7e-5/80 00000046-00000078 Core Gen10 Mobile - SNB-E/EN/EP C1/M0 6-2d-6/6d 0000061f-00000621 Xeon E3/E5, Core X - SNB-E/EN/...

RSA-250 Factored

RSA-250 has been factored. This computation was performed with the Number Field Sieve algorithm, using the open-source CADO-NFS software. The total computation time was roughly 2700 core-years, using Intel Xeon Gold 6130 CPUs as a reference 2.1GHz: RSA-250 sieving: 2450 physical core-years RSA-25...

Intel® Processors Voltage Settings Modification Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow escalation of privilege and/or information disclosure. Intel has released firmware updates to system manufacturers to mitigate this potential vulnerability Vulnerability Details: CVEID: CVE-2019-11157 Description:...

CVE-2019-11184

A flaw has been discovered in which an attacker can infer SSH keystrokes when after a victim connects to a compromised host. The attacker must compromise a server that the victim is connecting to and be able to groom the CPU cache on the system prior to or while a connection is in progress. The...

hw: voltage modulation technical advisory

Improper conditions check in the voltage modulation interface for some IntelR XeonR Scalable Processors may allow a privileged user to potentially enable denial of service via local access...

Intel Manycore Platform Software Stack (MPSS) Elevation of Privilege Vulnerability

The Intel Manycore Platform Software Stack MPSS is a manycore platform software stack developed by Intel Corporation USA that is required to run the Intel XeonPhi coprocessor. An elevation of privilege vulnerability exists in Intel Manycore Platform Software Stack MPSS. An attacker could exploit...

Security Bulletin: IBM has released Unified Extensible Firmware Interface (UEFI) fixes in response to Intel escalation of privilege vulnerability.

Summary IBM has released the Unified Extensible Firmware Interface UEFI fixes for System x, Flex and BladeCenter systems in response to the following Intel escalation of privilege vulnerability. Vulnerability Details CVEID: CVE-2019-0151 DESCRIPTION: Insufficient memory protection in IntelR TXT f...

Intel® Processor Graphics Advisory

Summary: A potential security vulnerability in Intel® Processor Graphics may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-14615 Description: Insufficient control flow in certain data structures f...

NewStart CGSL CORE 5.05 / MAIN 5.05 : kernel Multiple Vulnerabilities (NS-SA-2020-0002)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has kernel packages installed that are affected by multiple vulnerabilities: - Improper invalidation for page table updates by a virtual guest operating system for multiple IntelR Processors may allow an authenticated user to...

The vulnerability of microprogramming software for Intel Xeon processors allows a hacker to trigger a service failure.

The vulnerability of Intel Xeon processor microprogramming software is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures...

NewStart CGSL CORE 5.05 / MAIN 5.05 : kernel-rt Multiple Vulnerabilities (NS-SA-2020-0008)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has kernel-rt packages installed that are affected by multiple vulnerabilities: - Insufficient access control in subsystem for Intel R processor graphics in 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families;...

Intel Fixes High-Severity Flaw in Performance Analysis Tool

Intel is warning of a high-severity vulnerability in its performance analysis tool called Intel VTune Profiler. If exploited the flaw allows an adversary to perform a privilege escalation attack, giving them elevated and unauthorized system access to a targeted system. The VTune Profiler, formerl...

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0264)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities: - The bnepsockioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\...

Vulnerability of microprogramming software for Intel Core and Intel Xeon processors, allowing attackers to enhance their privileges

The vulnerability of microprogramming software for Intel Core and Intel Xeon processors lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerabilities of microprogramming software for Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors, and Intel Xeon Processors D allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information.

Vulnerability of microprogramming software for Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors, and Intel Xeon Processors: exploitation may allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information...

USN-4182-3: Intel Microcode regression | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description USN-4182-1 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific...

Multiple Intel Processors CVE-2019-14607 Multiple Security Vulnerabilities

Description Multiple Intel Processors are prone to multiple security vulnerabilities. A local attacker can leverage these issues to obtain sensitive information, gain elevated privileges and cause denial of service conditions. This may aid in further attacks. Technologies Affected Intel 6th...