Most recent entries from all

ALSA-2024:9401 — Moderate: microcode_ctl security update

Affected: AlmaLinux:9: microcode_ctl

The microcode_ctl packages provide microcode updates for Intel and AMD processors.

Security Fix(es):

* kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655) * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746) * kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575) * kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368) * kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490) * intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733) * intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2024-06692

BELL-CVE-2023-39368

Affected: Alpaquita:23: intel-ucode, Alpaquita:stream: intel-ucode

certfr-2024-avi-0211 — De multiples vulnérabilités ont été découvertes dans les produits Citrix. Elle permet à un…

certfr-2024-avi-0211

EUVD-2026-216706

fkie_cve-2023-39368

Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable denial of service via network access.

GHSA-pvrq-gg3w-f695

Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable denial of service via network access.

gsd-2023-39368

OESA-2024-1295 — microcode_ctl security update

Affected: openEuler:20.03-LTS-SP1: microcode_ctl, openEuler:20.03-LTS-SP4: microcode_ctl, openEuler:22.03-LTS: microcode_ctl, openEuler:22.03-LTS-SP1: microcode_ctl, openEuler:22.03-LTS-SP2: microcode_ctl, openEuler:22.03-LTS-SP3: microcode_ctl

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fix(es): Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.(CVE-2023-38575) Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable denial of service via network access.(CVE-2023-39368)

openSUSE-SU-2024:13769-1 — ucode-intel-20240312-1.1 on GA media

ucode-intel-20240312-1.1 on GA media

SUSE-SU-2024:0917-1 — Security update for ucode-intel

Security update for ucode-intel

UBUNTU-CVE-2023-39368

Affected: Ubuntu:Pro:14.04:LTS: intel-microcode, Ubuntu:Pro:16.04:LTS: intel-microcode, Ubuntu:Pro:18.04:LTS: intel-microcode, Ubuntu:20.04:LTS: intel-microcode, Ubuntu:22.04:LTS: intel-microcode

Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable denial of service via network access.

WID-SEC-W-2024-0615 — Intel Prozessor: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Prozessor ausnutzen, um Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder seine Privilegien zu erweitern.