Most recent entries from all

ALSA-2024:9401 — Moderate: microcode_ctl security update

Affected: AlmaLinux:9: microcode_ctl

The microcode_ctl packages provide microcode updates for Intel and AMD processors.

Security Fix(es):

* kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655) * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746) * kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575) * kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368) * kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490) * intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733) * intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2024-11227

BELL-CVE-2023-46103

Affected: Alpaquita:23: intel-ucode, Alpaquita:stream: intel-ucode

certfr-2024-avi-0397 — De multiples vulnérabilités ont été découvertes dans les produits Intel. Certaines d'entre elles permettent à un attaqu…

certfr-2024-avi-0397

EUVD-2026-9755

fkie_cve-2023-46103

Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.

GHSA-xp8f-77p3-p5rv

Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.

gsd-2023-46103

OESA-2024-1730 — microcode_ctl security update

Affected: openEuler:20.03-LTS-SP4: microcode_ctl

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fix(es): Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.(CVE-2023-45733) Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-45745) Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.(CVE-2023-46103) Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-47855)

openSUSE-SU-2024:13974-1 — ucode-intel-20240514-1.1 on GA media

ucode-intel-20240514-1.1 on GA media

SUSE-SU-2024:1684-1 — Security update for ucode-intel

Security update for ucode-intel

UBUNTU-CVE-2023-46103

Affected: Ubuntu:Pro:14.04:LTS: intel-microcode, Ubuntu:Pro:16.04:LTS: intel-microcode, Ubuntu:Pro:18.04:LTS: intel-microcode, Ubuntu:20.04:LTS: intel-microcode, Ubuntu:22.04:LTS: intel-microcode, Ubuntu:24.04:LTS: intel-microcode

Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.

WID-SEC-W-2024-1152 — Intel Prozessoren: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Intel Prozessoren ausnutzen, um Informationen offenzulegen, um einen Denial-of-Service-Zustand zu erzeugen, und um Privilegien zu erhöhen.