CVE-2020-24512
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to...
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
3.3
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- Record
CVE-2020-24512- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-203
- Updated
- 2026-11-02
CVE List No score
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- Record
CVE-2020-24512- Updated
- 2026-11-02
EUVDEUVD-2020-17232 No score
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- Record
EUVD-2020-17232- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-7hm5-8cp5-vqp5
3.3
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to...
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- Record
GHSA-7hm5-8cp5-vqp5- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-203
- Updated
- 2026-11-02
OSV
3.3
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- Record
CVE-2020-24512- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-24512
3.3
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- Record
DEBIAN-CVE-2020-24512- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
Show 36 moreShow less
OSVOESA-2021-1350
6.5
microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs.
Security Fix(es):
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.(CVE-2020-24511)
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.(CVE-2020-24512)
- Record
OESA-2021-1350- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2021:2299
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:2299- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2300
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:2300- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2301
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:2301- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2302
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:2302- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2303
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:2303- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2304
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:2304- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2305
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:2305- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2306
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:2306- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2307
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:2307- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2308
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:2308- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:3027
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:3027- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:3028
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:3028- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:3029
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:3029- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:3176
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:3176- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:3255
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:3255- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:3317
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:3317- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:3322
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:3322- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:3323
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:3323- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:3364
8.8
Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
- Record
RHSA-2021:3364- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2021:2308
8.8
Important: microcode_ctl security, bug fix and enhancement update
The microcode_ctl packages provide microcode updates for Intel.
Security Fix(es):
-
hw: vt-d related privilege escalation (CVE-2020-24489)
-
hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)
-
hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)
-
hw: information disclosure on some Intel Atom processors (CVE-2020-24513)
Bug Fix(es) and Enhancement(s):
- Update Intel CPU microcode to microcode-20210525 release
- Record
RLSA-2021:2308- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2021:3027
8.8
Important: microcode_ctl security, bug fix and enhancement update
The microcode_ctl packages provide microcode updates for Intel.
Security Fix(es):
-
hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)
-
hw: Vector Register Data Sampling (CVE-2020-0548)
-
hw: L1D Cache Eviction Sampling (CVE-2020-0549)
-
hw: vt-d related privilege escalation (CVE-2020-24489)
-
hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)
-
hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)
-
hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)
-
hw: Vector Register Leakage-Active (CVE-2020-8696)
-
hw: Fast forward store predictor (CVE-2020-8698)
- Record
RLSA-2021:3027- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-24512
2.8
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- Record
UBUNTU-CVE-2020-24512- CVSS 3.1
- 2.8 Low
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N - CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVCLSA-2021-1632262337 No score
Fix of CVE: CVE-2020-24513, CVE-2020-24489, CVE-2020-24512, CVE-2020-24511
- Do not use "grep -q" in a pipe in check_caveats.
- Update Intel CPU microcode to microcode-20210608 release:
- Fixes in releasenote.md file.
- Update Intel CPU microcode to microcode-20210525 release, addresses
CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
(#1962659, #1962709, #1962729, #1962675):
- Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
- Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
- Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
- Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
- Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04) at revision 0xb00000f;
- Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05) at revision 0xb00000f;
- Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
- Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
- Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
- Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
- Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
- Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
- Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
- Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up to 0xb00003e;
- Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up to 0x2006b06;
- Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
- Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
- Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up to 0xea;
- Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up to 0xea;
- Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up to 0xea;
- Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up to 0xea;
- Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from revision 0xde up to 0xea;
- Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up to 0xea;
- Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up to 0xea;
- Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up to 0xea;
- Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up to 0xea;
- Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up to 0xea;
- Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode from revision 0x44 up to 0x46;
- Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up to 0x19;
- Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159 up to 0x100015b;
- Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006 up to 0x4003102;
- Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision 0x5003006 up to 0x5003102;
- Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e up…
- Record
CLSA-2021-1632262337- Updated
- 2026-11-02
OSVCLSA-2021-1634922771 No score
Fixed CVEs in microcode_ctl: CVE-2020-24511, CVE-2020-24512, CVE-2020-24489, CVE-2020-24513
- Do not use "grep -q" in a pipe in check_caveats.
- Update Intel CPU microcode to microcode-20210608 release:
- Fixes in releasenote.md file.
- Update Intel CPU microcode to microcode-20210525 release, addresses
CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
(#1962659, #1962709, #1962729, #1962675):
- Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
- Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
- Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
- Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
- Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04) at revision 0xb00000f;
- Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05) at revision 0xb00000f;
- Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
- Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
- Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
- Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
- Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
- Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
- Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
- Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up to 0xb00003e;
- Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up to 0x2006b06;
- Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
- Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
- Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up to 0xea;
- Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up to 0xea;
- Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up to 0xea;
- Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up to 0xea;
- Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from revision 0xde up to 0xea;
- Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up to 0xea;
- Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up to 0xea;
- Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up to 0xea;
- Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up to 0xea;
- Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up to 0xea;
- Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode from revision 0x44 up to 0x46;
- Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up to 0x19;
- Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159 up to 0x100015b;
- Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006 up to 0x4003102;
- Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision 0x5003006 up to 0x5003102;
- Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e up…
- Record
CLSA-2021-1634922771- Updated
- 2026-11-02
OSVCLSA-2021-1635459202 No score
Fix CVE(s): CVE-2020-24512, CVE-2020-24511, CVE-2021-24489, CVE-2020-24513
- SECURITY UPDATE: New microcode data file 2021-06-08
- New Microcodes: sig 0x00050655, pf_mask 0xb7, 2018-11-16, rev 0x3000010, size 47104 sig 0x000606a5, pf_mask 0x87, 2021-03-08, rev 0xc0002f0, size 283648 sig 0x000606a6, pf_mask 0x87, 2021-04-25, rev 0xd0002a0, size 283648 sig 0x00080664, pf_mask 0x01, 2021-02-17, rev 0xb00000f, size 130048 sig 0x00080665, pf_mask 0x01, 2021-02-17, rev 0xb00000f, size 130048 sig 0x000806c1, pf_mask 0x80, 2021-03-31, rev 0x0088, size 109568 sig 0x000806c2, pf_mask 0xc2, 2021-04-07, rev 0x0016, size 94208 sig 0x000806d1, pf_mask 0xc2, 2021-04-23, rev 0x002c, size 99328 sig 0x00090661, pf_mask 0x01, 2021-02-04, rev 0x0011, size 19456 sig 0x000906c0, pf_mask 0x01, 2021-03-23, rev 0x001d, size 19456 sig 0x000a0671, pf_mask 0x02, 2021-04-11, rev 0x0040, size 100352
- Updated Microcodes: sig 0x000306f2, pf_mask 0x6f, 2021-01-27, rev 0x0046, size 34816 sig 0x000306f4, pf_mask 0x80, 2021-02-05, rev 0x0019, size 19456 sig 0x000406e3, pf_mask 0xc0, 2021-01-25, rev 0x00ea, size 105472 sig 0x000406f1, pf_mask 0xef, 2021-02-06, rev 0xb00003e, size 31744 sig 0x00050653, pf_mask 0x97, 2021-03-08, rev 0x100015b, size 34816 sig 0x00050654, pf_mask 0xb7, 2021-03-08, rev 0x2006b06, size 36864 sig 0x00050656, pf_mask 0xbf, 2021-03-08, rev 0x4003102, size 30720 sig 0x00050657, pf_mask 0xbf, 2021-03-08, rev 0x5003102, size 30720 sig 0x0005065b, pf_mask 0xbf, 2021-04-23, rev 0x7002302, size 27648 sig 0x00050663, pf_mask 0x10, 2021-02-04, rev 0x700001b, size 24576 sig 0x00050664, pf_mask 0x10, 2021-02-04, rev 0xf000019, size 24576 sig 0x00050665, pf_mask 0x10, 2021-02-04, rev 0xe000012, size 19456 sig 0x000506c9, pf_mask 0x03, 2020-10-23, rev 0x0044, size 17408 sig 0x000506ca, pf_mask 0x03, 2020-10-23, rev 0x0020, size 15360 sig 0x000506e3, pf_mask 0x36, 2021-01-25, rev 0x00ea, size 105472 sig 0x000506f1, pf_mask 0x01, 2020-10-23, rev 0x0034, size 11264 sig 0x000706a1, pf_mask 0x01, 2020-10-23, rev 0x0036, size 74752 sig 0x000706a8, pf_mask 0x01, 2020-10-23, rev 0x001a, size 75776 sig 0x000706e5, pf_mask 0x80, 2020-11-01, rev 0x00a6, size 110592 sig 0x000806a1, pf_mask 0x10, 2020-11-06, rev 0x002a, size 32768 sig 0x000806e9, pf_mask 0xc0, 2021-01-05, rev 0x00ea, size 104448 sig 0x000806e9, pf_mask 0x10, 2021-01-05, rev 0x00ea, size 104448 sig 0x000806ea, pf_mask 0xc0, 2021-01-06, rev 0x00ea, size 103424 sig 0x000806eb, pf_mask 0xd0, 2021-01-05, rev 0x00ea, size 104448 sig 0x000806ec, pf_mask 0x94, 2021-01-05, rev 0x00ea, size 104448 sig 0x000906e9, pf_mask 0x2a, 2021-01-05, rev 0x00ea, size 104448 sig 0x000906ea, pf_mask 0x22, 2021-01-05, rev 0x00ea, size 102400 sig 0x000906eb, pf_mask 0x02, 2021-01-05, rev 0x00ea, size 104448 sig 0x000906ec, pf_mask 0x22, 2021-01-05, rev 0x00ea, size 103424 sig 0x000906ed, pf_mask 0x22, 2021-01-05, rev 0x00ea, size 103424 sig 0x000a0652, pf_mask 0x20, 2021-02-07, rev 0x00ea, size 93184 sig 0x000a0653, pf_mask 0x22, 2021-03-08, rev 0x00ea, size 94208 sig 0x000a0655, pf_mask 0x22, 2021-03-08, rev 0x00ec, size 94208 sig 0x000a0660, pf_mask 0x80, 2020-12-08, rev 0x00e8, size 94208 sig 0x000a0661, pf_mask 0x80, 2021-02-07, rev 0x00ea, size 93184
- CVE-2021-24489, INTEL-TA-00442
- CVE-2020-24511, INTEL-TA-00464
- CVE-2020-24512, INTEL-TA-00464
- CVE-2020-24513, INTEL-TA-00465
- Record
CLSA-2021-1635459202- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0876-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
Updated to Intel CPU Microcode 20210608 release.
-
CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)
See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
-
CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
Other fixes:
-
Update for functional issues. Refer to Third Generation Intel Xeon Processor Scalable Family Specification Updatefor details.
-
Update for functional issues. Refer to Second Generation Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update for details.
-
Update for functional issues. Refer to Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor E5 v3 Product Family Specification Update for details.
-
Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update for details.
-
Update for functional issues. Refer to 8th and 9th Gen Intel Core Processor Family Spec Update for details.
-
Update for functional issues. Refer to 7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update for details.
-
Update for functional issues. Refer to 6th Gen Intel Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E3-1200 v6 Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E-2100 and E-2200 Processor Family Specification Update for details.
-
New platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | |…
- Record
openSUSE-SU-2021:0876-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:1933-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
Updated to Intel CPU Microcode 20210608 release.
-
CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833) See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
-
CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
-
Other fixes:
-
Update for functional issues. Refer to Third Generation Intel Xeon Processor Scalable Family Specification Updatefor details.
-
Update for functional issues. Refer to Second Generation Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update for details.
-
Update for functional issues. Refer to Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor E5 v3 Product Family Specification Update for details.
-
Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update for details.
-
Update for functional issues. Refer to 8th and 9th Gen Intel Core Processor Family Spec Update for details.
-
Update for functional issues. Refer to 7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update for details.
-
Update for functional issues. Refer to 6th Gen Intel Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E3-1200 v6 Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E-2100 and E-2200 Processor Family Specification Update for details.
-
New platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | | 03000010 |…
- Record
openSUSE-SU-2021:1933-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11478-1 No score
ucode-intel-20210608-1.2 on GA media
These are all security issues fixed in the ucode-intel-20210608-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11478-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:14758-1 No score
Security update for microcode_ctl
This update for microcode_ctl fixes the following issues:
Updated to Intel CPU Microcode 20210525 release:
- CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (bsc#1179833)
- CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (bsc#1179836)
- CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837)
- CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (bsc#1179839)
- Record
SUSE-SU-2021:14758-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:1929-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
Updated to Intel CPU Microcode 20210608 release.
-
CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833) See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
-
CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
Other fixes:
-
Update for functional issues. Refer to Third Generation Intel Xeon Processor Scalable Family Specification Updatefor details.
-
Update for functional issues. Refer to Second Generation Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update for details.
-
Update for functional issues. Refer to Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor E5 v3 Product Family Specification Update for details.
-
Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update for details.
-
Update for functional issues. Refer to 8th and 9th Gen Intel Core Processor Family Spec Update for details.
-
Update for functional issues. Refer to 7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update for details.
-
Update for functional issues. Refer to 6th Gen Intel Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E3-1200 v6 Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E-2100 and E-2200 Processor Family Specification Update for details.
-
New platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | | 03000010 | Xeon…
- Record
SUSE-SU-2021:1929-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:1930-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
Updated to Intel CPU Microcode 20210608 release.
-
CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)
See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
-
CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
Other fixes:
-
Update for functional issues. Refer to Third Generation Intel Xeon Processor Scalable Family Specification Updatefor details.
-
Update for functional issues. Refer to Second Generation Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update for details.
-
Update for functional issues. Refer to Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor E5 v3 Product Family Specification Update for details.
-
Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update for details.
-
Update for functional issues. Refer to 8th and 9th Gen Intel Core Processor Family Spec Update for details.
-
Update for functional issues. Refer to 7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update for details.
-
Update for functional issues. Refer to 6th Gen Intel Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E3-1200 v6 Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E-2100 and E-2200 Processor Family Specification Update for details.
-
New platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | | 03000010 | Xeon…
- Record
SUSE-SU-2021:1930-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:1931-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
Updated to Intel CPU Microcode 20210608 release.
-
CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)
See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
-
CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
Other fixes:
-
Update for functional issues. Refer to Third Generation Intel Xeon Processor Scalable Family Specification Updatefor details.
-
Update for functional issues. Refer to Second Generation Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update for details.
-
Update for functional issues. Refer to Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor E5 v3 Product Family Specification Update for details.
-
Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update for details.
-
Update for functional issues. Refer to 8th and 9th Gen Intel Core Processor Family Spec Update for details.
-
Update for functional issues. Refer to 7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update for details.
-
Update for functional issues. Refer to 6th Gen Intel Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E3-1200 v6 Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E-2100 and E-2200 Processor Family Specification Update for details.
-
New platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | |…
- Record
SUSE-SU-2021:1931-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:1932-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Updated to Intel CPU Microcode 20210525 release.
-
CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)
See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
-
CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
-
Other fixes:
-
Update for functional issues. Refer to Third Generation Intel Xeon Processor Scalable Family Specification Updatefor details.
-
Update for functional issues. Refer to Second Generation Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update for details.
-
Update for functional issues. Refer to Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor E5 v3 Product Family Specification Update for details.
-
Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update for details.
-
Update for functional issues. Refer to 8th and 9th Gen Intel Core Processor Family Spec Update for details.
-
Update for functional issues. Refer to 7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update for details.
-
Update for functional issues. Refer to 6th Gen Intel Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E3-1200 v6 Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E-2100 and E-2200 Processor Family Specification Update for details.
-
New platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | |…
- Record
SUSE-SU-2021:1932-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:1933-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
Updated to Intel CPU Microcode 20210608 release.
-
CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833) See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
-
CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
-
CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
-
Other fixes:
-
Update for functional issues. Refer to Third Generation Intel Xeon Processor Scalable Family Specification Updatefor details.
-
Update for functional issues. Refer to Second Generation Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update for details.
-
Update for functional issues. Refer to Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon Processor E5 v3 Product Family Specification Update for details.
-
Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update for details.
-
Update for functional issues. Refer to 8th and 9th Gen Intel Core Processor Family Spec Update for details.
-
Update for functional issues. Refer to 7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update for details.
-
Update for functional issues. Refer to 6th Gen Intel Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E3-1200 v6 Processor Family Specification Update for details.
-
Update for functional issues. Refer to Intel Xeon E-2100 and E-2200 Processor Family Specification Update for details.
-
New platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | | 03000010 |…
- Record
SUSE-SU-2021:1933-1- Updated
- 2026-11-02
OSVUSN-4985-1 No score
intel-microcode vulnerabilities
It was discovered that some Intel processors may not properly invalidate cache entries used by Intel Virtualization Technology for Directed I/O (VT-d). This may allow a local user to perform a privilege escalation attack. (CVE-2020-24489)
Joseph Nuzman discovered that some Intel processors may not properly apply EIBRS mitigations (originally developed for CVE-2017-5715) and hence may allow unauthorized memory reads via sidechannel attacks. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2020-24511)
Travis Downs discovered that some Intel processors did not properly flush cache-lines for trivial-data values. This may allow an unauthorized user to infer the presence of these trivial-data-cache-lines via timing sidechannel attacks. A local attacker could use this to expose sensitive information. (CVE-2020-24512)
It was discovered that certain Intel Atom processors could expose memory contents stored in microarchitectural buffers. A local attacker could use this to expose sensitive information. (CVE-2020-24513)
- Record
USN-4985-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
microcode_ctlTuxCare:CentOS:6 From an advisory covering 4 CVEs |
before 2:1.17-33.34.el6.cloudlinux.els | 2:1.17-33.34.el6.cloudlinux.els |
microcode_ctlTuxCare:OracleLinux:6 From an advisory covering 4 CVEs |
before 2:1.17-33.34.el6.cloudlinux.els | 2:1.17-33.34.el6.cloudlinux.els |
intel-microcodeTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 3.20210608.0ubuntu0.16.04.1+cloudlinux.els1 | 3.20210608.0ubuntu0.16.04.1+cloudlinux.els1 |
intel-microcodeDebian:12 |
before 3.20210608.1, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
3.20210608.1 |
intel-microcodeDebian:13 |
before 3.20210608.1, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
3.20210608.1 |
intel-microcodeDebian:14 |
before 3.20210608.1, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
3.20210608.1 |
intel-microcodeDebian:9 From an advisory covering 4 CVEs |
before 3.20210608.2~deb9u2, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
3.20210608.2~deb9u2 |
intel-microcodeDebian:10 From an advisory covering 4 CVEs |
before 3.20210608.2~deb10u1, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
3.20210608.2~deb10u1 |
microcode_ctlopenEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs |
before 2.1-33.oe1 | 2.1-33.oe1 |
microcode_ctlopenEuler:20.03-LTS-SP2 From an advisory covering 2 CVEs |
before 2.1-33.oe1 | 2.1-33.oe1 |
Show 103 moreShow less
| Package | Affected | Fixed |
|---|---|---|
microcode_ctlRed Hat:rhel_els:6 From an advisory covering 4 CVEs |
before 2:1.17-33.33.el6_10 | 2:1.17-33.33.el6_10 |
microcode_ctl-debuginfoRed Hat:rhel_els:6 From an advisory covering 4 CVEs |
before 2:1.17-33.33.el6_10 | 2:1.17-33.33.el6_10 |
microcode_ctlRed Hat:rhel_aus:7.2::server From an advisory covering 4 CVEs |
before 2:2.1-12.37.el7_2 | 2:2.1-12.37.el7_2 |
microcode_ctl-debuginfoRed Hat:rhel_aus:7.2::server From an advisory covering 4 CVEs |
before 2:2.1-12.37.el7_2 | 2:2.1-12.37.el7_2 |
microcode_ctlRed Hat:rhel_aus:7.4::server From an advisory covering 4 CVEs |
before 2:2.1-22.39.el7_4 | 2:2.1-22.39.el7_4 |
microcode_ctl-debuginfoRed Hat:rhel_aus:7.4::server From an advisory covering 4 CVEs |
before 2:2.1-22.39.el7_4 | 2:2.1-22.39.el7_4 |
microcode_ctlRed Hat:rhel_e4s:7.4::server From an advisory covering 4 CVEs |
before 2:2.1-22.39.el7_4 | 2:2.1-22.39.el7_4 |
microcode_ctl-debuginfoRed Hat:rhel_e4s:7.4::server From an advisory covering 4 CVEs |
before 2:2.1-22.39.el7_4 | 2:2.1-22.39.el7_4 |
microcode_ctlRed Hat:rhel_tus:7.4::server From an advisory covering 4 CVEs |
before 2:2.1-22.39.el7_4 | 2:2.1-22.39.el7_4 |
microcode_ctl-debuginfoRed Hat:rhel_tus:7.4::server From an advisory covering 4 CVEs |
before 2:2.1-22.39.el7_4 | 2:2.1-22.39.el7_4 |
microcode_ctlRed Hat:rhel_aus:7.3::server From an advisory covering 4 CVEs |
before 2:2.1-16.40.el7_3 | 2:2.1-16.40.el7_3 |
microcode_ctl-debuginfoRed Hat:rhel_aus:7.3::server From an advisory covering 4 CVEs |
before 2:2.1-16.40.el7_3 | 2:2.1-16.40.el7_3 |
microcode_ctlRed Hat:rhel_aus:7.6::server From an advisory covering 4 CVEs |
before 2:2.1-47.21.el7_6 | 2:2.1-47.21.el7_6 |
microcode_ctl-debuginfoRed Hat:rhel_aus:7.6::server From an advisory covering 4 CVEs |
before 2:2.1-47.21.el7_6 | 2:2.1-47.21.el7_6 |
microcode_ctlRed Hat:rhel_e4s:7.6::server From an advisory covering 4 CVEs |
before 2:2.1-47.21.el7_6 | 2:2.1-47.21.el7_6 |
microcode_ctl-debuginfoRed Hat:rhel_e4s:7.6::server From an advisory covering 4 CVEs |
before 2:2.1-47.21.el7_6 | 2:2.1-47.21.el7_6 |
microcode_ctlRed Hat:rhel_tus:7.6::server From an advisory covering 4 CVEs |
before 2:2.1-47.21.el7_6 | 2:2.1-47.21.el7_6 |
microcode_ctl-debuginfoRed Hat:rhel_tus:7.6::server From an advisory covering 4 CVEs |
before 2:2.1-47.21.el7_6 | 2:2.1-47.21.el7_6 |
microcode_ctlRed Hat:rhel_eus:7.7::computenode From an advisory covering 4 CVEs |
before 2:2.1-53.16.el7_7 | 2:2.1-53.16.el7_7 |
microcode_ctl-debuginfoRed Hat:rhel_eus:7.7::computenode From an advisory covering 4 CVEs |
before 2:2.1-53.16.el7_7 | 2:2.1-53.16.el7_7 |
microcode_ctlRed Hat:rhel_eus:7.7::server From an advisory covering 4 CVEs |
before 2:2.1-53.16.el7_7 | 2:2.1-53.16.el7_7 |
microcode_ctl-debuginfoRed Hat:rhel_eus:7.7::server From an advisory covering 4 CVEs |
before 2:2.1-53.16.el7_7 | 2:2.1-53.16.el7_7 |
microcode_ctlRed Hat:enterprise_linux:7::client From an advisory covering 4 CVEs |
before 2:2.1-73.9.el7_9 | 2:2.1-73.9.el7_9 |
microcode_ctl-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 4 CVEs |
before 2:2.1-73.9.el7_9 | 2:2.1-73.9.el7_9 |
microcode_ctlRed Hat:enterprise_linux:7::server From an advisory covering 4 CVEs |
before 2:2.1-73.9.el7_9 | 2:2.1-73.9.el7_9 |
microcode_ctl-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 4 CVEs |
before 2:2.1-73.9.el7_9 | 2:2.1-73.9.el7_9 |
microcode_ctlRed Hat:enterprise_linux:7::workstation From an advisory covering 4 CVEs |
before 2:2.1-73.9.el7_9 | 2:2.1-73.9.el7_9 |
microcode_ctl-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 4 CVEs |
before 2:2.1-73.9.el7_9 | 2:2.1-73.9.el7_9 |
microcode_ctlRed Hat:rhel_eus:8.1::baseos From an advisory covering 4 CVEs |
before 4:20190618-1.20210525.1.el8_1 | 4:20190618-1.20210525.1.el8_1 |
microcode_ctlRed Hat:rhel_eus:8.2::baseos From an advisory covering 4 CVEs |
before 4:20191115-4.20210525.1.el8_2 | 4:20191115-4.20210525.1.el8_2 |
microcode_ctlRed Hat:enterprise_linux:8::baseos From an advisory covering 4 CVEs |
before 4:20210216-1.20210525.1.el8_4 | 4:20210216-1.20210525.1.el8_4 |
microcode_ctlRed Hat:enterprise_linux:8::baseos From an advisory covering 9 CVEs |
before 4:20210216-1.20210608.1.el8_4 | 4:20210216-1.20210608.1.el8_4 |
microcode_ctlRed Hat:enterprise_linux:7::client From an advisory covering 9 CVEs |
before 2:2.1-73.11.el7_9 | 2:2.1-73.11.el7_9 |
microcode_ctl-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 9 CVEs |
before 2:2.1-73.11.el7_9 | 2:2.1-73.11.el7_9 |
microcode_ctlRed Hat:enterprise_linux:7::server From an advisory covering 9 CVEs |
before 2:2.1-73.11.el7_9 | 2:2.1-73.11.el7_9 |
microcode_ctl-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 9 CVEs |
before 2:2.1-73.11.el7_9 | 2:2.1-73.11.el7_9 |
microcode_ctlRed Hat:enterprise_linux:7::workstation From an advisory covering 9 CVEs |
before 2:2.1-73.11.el7_9 | 2:2.1-73.11.el7_9 |
microcode_ctl-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 9 CVEs |
before 2:2.1-73.11.el7_9 | 2:2.1-73.11.el7_9 |
microcode_ctlRed Hat:rhel_eus:7.7::computenode From an advisory covering 9 CVEs |
before 2:2.1-53.18.el7_7 | 2:2.1-53.18.el7_7 |
microcode_ctl-debuginfoRed Hat:rhel_eus:7.7::computenode From an advisory covering 9 CVEs |
before 2:2.1-53.18.el7_7 | 2:2.1-53.18.el7_7 |
microcode_ctlRed Hat:rhel_eus:7.7::server From an advisory covering 9 CVEs |
before 2:2.1-53.18.el7_7 | 2:2.1-53.18.el7_7 |
microcode_ctl-debuginfoRed Hat:rhel_eus:7.7::server From an advisory covering 9 CVEs |
before 2:2.1-53.18.el7_7 | 2:2.1-53.18.el7_7 |
microcode_ctlRed Hat:rhel_eus:8.1::baseos From an advisory covering 9 CVEs |
before 4:20190618-1.20210608.1.el8_1 | 4:20190618-1.20210608.1.el8_1 |
microcode_ctlRed Hat:rhel_aus:7.4::server From an advisory covering 9 CVEs |
before 2:2.1-22.41.el7_4 | 2:2.1-22.41.el7_4 |
microcode_ctl-debuginfoRed Hat:rhel_aus:7.4::server From an advisory covering 9 CVEs |
before 2:2.1-22.41.el7_4 | 2:2.1-22.41.el7_4 |
microcode_ctlRed Hat:rhel_e4s:7.4::server From an advisory covering 9 CVEs |
before 2:2.1-22.41.el7_4 | 2:2.1-22.41.el7_4 |
microcode_ctl-debuginfoRed Hat:rhel_e4s:7.4::server From an advisory covering 9 CVEs |
before 2:2.1-22.41.el7_4 | 2:2.1-22.41.el7_4 |
microcode_ctlRed Hat:rhel_tus:7.4::server From an advisory covering 9 CVEs |
before 2:2.1-22.41.el7_4 | 2:2.1-22.41.el7_4 |
microcode_ctl-debuginfoRed Hat:rhel_tus:7.4::server From an advisory covering 9 CVEs |
before 2:2.1-22.41.el7_4 | 2:2.1-22.41.el7_4 |
microcode_ctlRed Hat:rhel_aus:7.6::server From an advisory covering 9 CVEs |
before 2:2.1-47.23.el7_6 | 2:2.1-47.23.el7_6 |
microcode_ctl-debuginfoRed Hat:rhel_aus:7.6::server From an advisory covering 9 CVEs |
before 2:2.1-47.23.el7_6 | 2:2.1-47.23.el7_6 |
microcode_ctlRed Hat:rhel_e4s:7.6::server From an advisory covering 9 CVEs |
before 2:2.1-47.23.el7_6 | 2:2.1-47.23.el7_6 |
microcode_ctl-debuginfoRed Hat:rhel_e4s:7.6::server From an advisory covering 9 CVEs |
before 2:2.1-47.23.el7_6 | 2:2.1-47.23.el7_6 |
microcode_ctlRed Hat:rhel_tus:7.6::server From an advisory covering 9 CVEs |
before 2:2.1-47.23.el7_6 | 2:2.1-47.23.el7_6 |
microcode_ctl-debuginfoRed Hat:rhel_tus:7.6::server From an advisory covering 9 CVEs |
before 2:2.1-47.23.el7_6 | 2:2.1-47.23.el7_6 |
microcode_ctlRed Hat:rhel_aus:7.3::server From an advisory covering 9 CVEs |
before 2:2.1-16.42.el7_3 | 2:2.1-16.42.el7_3 |
microcode_ctl-debuginfoRed Hat:rhel_aus:7.3::server From an advisory covering 9 CVEs |
before 2:2.1-16.42.el7_3 | 2:2.1-16.42.el7_3 |
microcode_ctlRed Hat:rhel_aus:7.2::server From an advisory covering 9 CVEs |
before 2:2.1-12.39.el7_2 | 2:2.1-12.39.el7_2 |
microcode_ctl-debuginfoRed Hat:rhel_aus:7.2::server From an advisory covering 9 CVEs |
before 2:2.1-12.39.el7_2 | 2:2.1-12.39.el7_2 |
microcode_ctlRed Hat:rhel_eus:8.2::baseos From an advisory covering 9 CVEs |
before 4:20191115-4.20210608.1.el8_2 | 4:20191115-4.20210608.1.el8_2 |
microcode_ctlRocky Linux:8 From an advisory covering 4 CVEs |
before 4:20210216-1.20210525.1.el8_4 | 4:20210216-1.20210525.1.el8_4 |
microcode_ctlRocky Linux:8 From an advisory covering 9 CVEs |
before 4:20210216-1.20210608.1.el8_4 | 4:20210216-1.20210608.1.el8_4 |
microcode_ctlSUSE:Linux Enterprise Point of Sale 11 SP3 From an advisory covering 4 CVEs |
before 1.17-102.83.71.1 | 1.17-102.83.71.1 |
microcode_ctlSUSE:Linux Enterprise Server 11 SP4-LTSS From an advisory covering 4 CVEs |
before 1.17-102.83.71.1 | 1.17-102.83.71.1 |
ucode-intelSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 4 CVEs |
before 20210525-3.35.1 | 20210525-3.35.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 4 CVEs |
before 20210525-3.35.1 | 20210525-3.35.1 |
ucode-intelSUSE:HPE Helion OpenStack 8 From an advisory covering 4 CVEs |
before 20210525-13.90.1 | 20210525-13.90.1 |
ucode-intelSUSE:OpenStack Cloud 8 From an advisory covering 4 CVEs |
before 20210525-13.90.1 | 20210525-13.90.1 |
ucode-intelSUSE:OpenStack Cloud 9 From an advisory covering 4 CVEs |
before 20210525-13.90.1 | 20210525-13.90.1 |
ucode-intelSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 4 CVEs |
before 20210525-13.90.1 | 20210525-13.90.1 |
ucode-intelSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 4 CVEs |
before 20210525-13.90.1 | 20210525-13.90.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 4 CVEs |
before 20210525-13.90.1 | 20210525-13.90.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 4 CVEs |
before 20210525-13.90.1 | 20210525-13.90.1 |
ucode-intelSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 4 CVEs |
before 20210525-13.90.1 | 20210525-13.90.1 |
ucode-intelSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 4 CVEs |
before 20210525-13.90.1 | 20210525-13.90.1 |
ucode-intelSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 4 CVEs |
before 20210525-13.90.1 | 20210525-13.90.1 |
ucode-intelSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 4 CVEs |
before 20210525-13.90.1 | 20210525-13.90.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 4 CVEs |
before 20210525-3.67.1 | 20210525-3.67.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 4 CVEs |
before 20210525-3.67.1 | 20210525-3.67.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 4 CVEs |
before 20210525-3.67.1 | 20210525-3.67.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 4 CVEs |
before 20210525-3.203.1 | 20210525-3.203.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 4 CVEs |
before 20210525-3.203.1 | 20210525-3.203.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 4 CVEs |
before 20210525-3.203.1 | 20210525-3.203.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 4 CVEs |
before 20210525-3.203.1 | 20210525-3.203.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 4 CVEs |
before 20210525-3.203.1 | 20210525-3.203.1 |
ucode-intelSUSE:Manager Proxy 4.0 From an advisory covering 4 CVEs |
before 20210525-3.203.1 | 20210525-3.203.1 |
ucode-intelSUSE:Manager Retail Branch Server 4.0 From an advisory covering 4 CVEs |
before 20210525-3.203.1 | 20210525-3.203.1 |
ucode-intelSUSE:Manager Server 4.0 From an advisory covering 4 CVEs |
before 20210525-3.203.1 | 20210525-3.203.1 |
ucode-intelSUSE:Enterprise Storage 6 From an advisory covering 4 CVEs |
before 20210525-3.203.1 | 20210525-3.203.1 |
ucode-intelSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 4 CVEs |
before 20210525-7.1 | 20210525-7.1 |
ucode-intelSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 4 CVEs |
before 20210525-7.1 | 20210525-7.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.0 From an advisory covering 4 CVEs |
before 20210525-7.1 | 20210525-7.1 |
intel-microcodeUbuntu:Pro:14.04:LTS |
before 3.20210608.0ubuntu0.14.04.1+esm1, plus listed versions 1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2 Show 16 moreShow less3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.13.20191112-0ubuntu0.14.04.23.20191115.1ubuntu0.14.04.13.20191115.1ubuntu0.14.04.23.20200609.0ubuntu0.14.04.03.20200609.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.2 |
3.20210608.0ubuntu0.14.04.1+esm1 |
intel-microcodeUbuntu:Pro:16.04:LTS |
before 3.20210608.0ubuntu0.16.04.1+esm1, plus listed versions 3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1 Show 15 moreShow less3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.23.20210216.0ubuntu0.16.04.1 |
3.20210608.0ubuntu0.16.04.1+esm1 |
intel-microcodeUbuntu:18.04:LTS |
before 3.20210608.0ubuntu0.18.04.1, plus listed versions 3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1 Show 14 moreShow less3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.23.20210216.0ubuntu0.18.04.1 |
3.20210608.0ubuntu0.18.04.1 |
intel-microcodeUbuntu:20.04:LTS |
before 3.20210608.0ubuntu0.20.04.1, plus listed versions 3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0 Show 5 moreShow less3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.23.20210216.0ubuntu0.20.04.1 |
3.20210608.0ubuntu0.20.04.1 |
intel-microcodeUbuntu:Pro:14.04:LTS From an advisory covering 4 CVEs |
before 3.20210608.0ubuntu0.14.04.1+esm1, plus listed versions 1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2 Show 16 moreShow less3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.13.20191112-0ubuntu0.14.04.23.20191115.1ubuntu0.14.04.13.20191115.1ubuntu0.14.04.23.20200609.0ubuntu0.14.04.03.20200609.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.2 |
3.20210608.0ubuntu0.14.04.1+esm1 |
intel-microcodeUbuntu:Pro:16.04:LTS From an advisory covering 4 CVEs |
before 3.20210608.0ubuntu0.16.04.1+esm1, plus listed versions 3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1 Show 15 moreShow less3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.23.20210216.0ubuntu0.16.04.1 |
3.20210608.0ubuntu0.16.04.1+esm1 |
intel-microcodeUbuntu:18.04:LTS From an advisory covering 4 CVEs |
before 3.20210608.0ubuntu0.18.04.1, plus listed versions 3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1 Show 14 moreShow less3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.23.20210216.0ubuntu0.18.04.1 |
3.20210608.0ubuntu0.18.04.1 |
intel-microcodeUbuntu:20.04:LTS From an advisory covering 4 CVEs |
before 3.20210608.0ubuntu0.20.04.1, plus listed versions 3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0 Show 5 moreShow less3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.23.20210216.0ubuntu0.20.04.1 |
3.20210608.0ubuntu0.20.04.1 |
ucode-intelopenSUSE:Leap 15.2 From an advisory covering 4 CVEs |
before 20210525-lp152.2.17.1 | 20210525-lp152.2.17.1 |
ucode-intelopenSUSE:Leap 15.3 From an advisory covering 4 CVEs |
before 20210525-7.1 | 20210525-7.1 |
ucode-intelopenSUSE:Tumbleweed From an advisory covering 15 CVEs |
before 20210608-1.2 | 20210608-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-24512 is a low vulnerability (CVSS 3.3) in Debian Linux, published June 8, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in intel-microcode 3.20210608.1.
References
intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html
security.netapp.com/advisory/ntap-20210611-0005
debian.org/security/2021/dsa-4934
lists.debian.org/debian-lts-announce/2021/07/msg00022.html
cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf
nvd.nist.gov/vuln/detail/CVE-2020-24512
Show 143 moreShow less
github.com/advisories/GHSA-7hm5-8cp5-vqp5
errata.cloudlinux.com/els6/CLSA-2021-1632262337.html
errata.cloudlinux.com/ol6/CLSA-2021-1634922771.html
errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1635459202
security-tracker.debian.org/tracker/CVE-2020-24512
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1350
nvd.nist.gov/vuln/detail/CVE-2020-24511
access.redhat.com/errata/RHSA-2021:2299
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1962650
bugzilla.redhat.com/show_bug.cgi?id=1962666
bugzilla.redhat.com/show_bug.cgi?id=1962702
bugzilla.redhat.com/show_bug.cgi?id=1962722
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2299.json
access.redhat.com/security/cve/CVE-2020-24489
cve.org/CVERecord?id=CVE-2020-24489
nvd.nist.gov/vuln/detail/CVE-2020-24489
access.redhat.com/security/cve/CVE-2020-24511
cve.org/CVERecord?id=CVE-2020-24511
access.redhat.com/security/cve/CVE-2020-24512
cve.org/CVERecord?id=CVE-2020-24512
access.redhat.com/security/cve/CVE-2020-24513
cve.org/CVERecord?id=CVE-2020-24513
nvd.nist.gov/vuln/detail/CVE-2020-24513
access.redhat.com/errata/RHSA-2021:2300
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2300.json
access.redhat.com/errata/RHSA-2021:2301
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2301.json
access.redhat.com/errata/RHSA-2021:2302
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2302.json
access.redhat.com/errata/RHSA-2021:2303
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2303.json
access.redhat.com/errata/RHSA-2021:2304
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2304.json
access.redhat.com/errata/RHSA-2021:2305
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2305.json
access.redhat.com/errata/RHSA-2021:2306
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2306.json
access.redhat.com/errata/RHSA-2021:2307
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2307.json
access.redhat.com/errata/RHSA-2021:2308
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2308.json
access.redhat.com/errata/RHSA-2021:3027
bugzilla.redhat.com/show_bug.cgi?id=1788786
bugzilla.redhat.com/show_bug.cgi?id=1788788
bugzilla.redhat.com/show_bug.cgi?id=1827165
bugzilla.redhat.com/show_bug.cgi?id=1828583
bugzilla.redhat.com/show_bug.cgi?id=1890355
bugzilla.redhat.com/show_bug.cgi?id=1890356
bugzilla.redhat.com/show_bug.cgi?id=1972325
bugzilla.redhat.com/show_bug.cgi?id=1972328
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3027.json
access.redhat.com/security/cve/CVE-2020-0543
cve.org/CVERecord?id=CVE-2020-0543
nvd.nist.gov/vuln/detail/CVE-2020-0543
access.redhat.com/solutions/5142691
access.redhat.com/solutions/5142751
blogs.intel.com/technology/2020/06/ipas-security-advisories-for-june-2020
software.intel.com/security-software-guidance/insights/deep-dive-special-register-buffer-data-sampling
xenbits.xen.org/xsa/advisory-320.html
access.redhat.com/security/cve/CVE-2020-0548
cve.org/CVERecord?id=CVE-2020-0548
nvd.nist.gov/vuln/detail/CVE-2020-0548
access.redhat.com/solutions/l1d-cache-eviction-and-vector-register-sampling
blogs.intel.com/technology/2020/01/ipas-intel-sa-00329
cacheoutattack.com/CacheOut.pdf
software.intel.com/security-software-guidance/software-guidance/l1d-eviction-sampling
access.redhat.com/security/cve/CVE-2020-0549
cve.org/CVERecord?id=CVE-2020-0549
nvd.nist.gov/vuln/detail/CVE-2020-0549
access.redhat.com/security/cve/CVE-2020-8695
access.redhat.com/articles/5569051
cve.org/CVERecord?id=CVE-2020-8695
nvd.nist.gov/vuln/detail/CVE-2020-8695
en.wikipedia.org/wiki/Power_analysis
intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html
access.redhat.com/security/cve/CVE-2020-8696
cve.org/CVERecord?id=CVE-2020-8696
nvd.nist.gov/vuln/detail/CVE-2020-8696
intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html
access.redhat.com/security/cve/CVE-2020-8698
cve.org/CVERecord?id=CVE-2020-8698
nvd.nist.gov/vuln/detail/CVE-2020-8698
access.redhat.com/errata/RHSA-2021:3028
bugzilla.redhat.com/show_bug.cgi?id=1897684
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3028.json
access.redhat.com/errata/RHSA-2021:3029
bugzilla.redhat.com/show_bug.cgi?id=1972332
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3029.json
access.redhat.com/errata/RHSA-2021:3176
bugzilla.redhat.com/show_bug.cgi?id=1972327
bugzilla.redhat.com/show_bug.cgi?id=1972331
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3176.json
access.redhat.com/errata/RHSA-2021:3255
bugzilla.redhat.com/show_bug.cgi?id=1972334
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3255.json
access.redhat.com/errata/RHSA-2021:3317
bugzilla.redhat.com/show_bug.cgi?id=1972333
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3317.json
access.redhat.com/errata/RHSA-2021:3322
bugzilla.redhat.com/show_bug.cgi?id=1972335
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3322.json
access.redhat.com/errata/RHSA-2021:3323
bugzilla.redhat.com/show_bug.cgi?id=1972336
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3323.json
access.redhat.com/errata/RHSA-2021:3364
bugzilla.redhat.com/show_bug.cgi?id=1972326
bugzilla.redhat.com/show_bug.cgi?id=1972329
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3364.json
errata.rockylinux.org/RLSA-2021:2308
errata.rockylinux.org/RLSA-2021:3027
suse.com/support/update/announcement/2021/suse-su-202114758-1
bugzilla.suse.com/1179833
bugzilla.suse.com/1179836
bugzilla.suse.com/1179837
bugzilla.suse.com/1179839
suse.com/security/cve/CVE-2020-24489
suse.com/security/cve/CVE-2020-24511
suse.com/security/cve/CVE-2020-24512
suse.com/security/cve/CVE-2020-24513
suse.com/support/update/announcement/2021/suse-su-20211929-1
suse.com/support/update/announcement/2021/suse-su-20211930-1
suse.com/support/update/announcement/2021/suse-su-20211931-1
suse.com/support/update/announcement/2021/suse-su-20211932-1
suse.com/support/update/announcement/2021/suse-su-20211933-1
ubuntu.com/security/CVE-2020-24512
ubuntu.com/security/notices/USN-4985-1
ubuntu.com/security/CVE-2020-24489
ubuntu.com/security/CVE-2020-24511
ubuntu.com/security/CVE-2020-24513
lists.opensuse.org/archives/list/[email protected]/thread/LVSPIXHZZESTI3IJTF7URWDUHHXIRWBP
lists.opensuse.org/archives/list/[email protected]/thread/JL4WBLDZZMRKCJPRBNYNFPGJBJE5OQZO
suse.com/security/cve/CVE-2017-5715
suse.com/security/cve/CVE-2018-12126
suse.com/security/cve/CVE-2018-12130
suse.com/security/cve/CVE-2018-3640
suse.com/security/cve/CVE-2019-11135
suse.com/security/cve/CVE-2019-11139
suse.com/security/cve/CVE-2020-0543
suse.com/security/cve/CVE-2020-0548
suse.com/security/cve/CVE-2020-8695
suse.com/security/cve/CVE-2020-8696
suse.com/security/cve/CVE-2020-8698
Left out here: 503 versions and the rest of 9 source descriptions. The JSON record has them.