Every CVE Search/ Get API key

CVE-2024-21820

Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations...

8.5 HighFix available

Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

0.22%Up 0.2 points since Nov 14, 2024
90%50%10%1%

What each source reports

CVE List Score used 8.5

Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.

Record
CVE-2024-21820
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
CVSS 3.1
7.2 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-276
Updated
2026-11-02
EUVDEUVD-2024-19432 8.5

Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.

Record
EUVD-2024-19432
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-643q-8gx3-hf55 8.5

Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations...

Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.

Record
GHSA-643q-8gx3-hf55
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.2 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-276
Updated
2026-11-02
NVD 8.5

Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.

Record
CVE-2024-21820
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.2 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-276
Updated
2026-11-02
OSVBELL-CVE-2024-21820 7.2
Record
BELL-CVE-2024-21820
CVSS 3.1
7.2 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2024-21820 8.5

Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.

Record
DEBIAN-CVE-2024-21820
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
Show 13 moreShow less
OSVOESA-2024-2524 7.2

microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs.

Security Fix(es):

(CVE-2024-21820)

(CVE-2024-21853)

Record
OESA-2024-2524
CVSS 3.1
7.2 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2024-21820 8.5

Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.

Record
UBUNTU-CVE-2024-21820
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
CVSS 3.1
7.2 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVCLSA-2025-1736502911 No score

Fix of 5 CVEs

  • New microcode update packages from upstream up to 2024-11-12:
    • Updated microcodes: sig 0x000806f4, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f5, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f6, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f7, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f8, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x00090672, pf_mask 0x07, 2024-05-29, rev 0x0037, size 224256 sig 0x00090675, pf_mask 0x07, 2024-05-29, rev 0x0037, size 224256 sig 0x000906a3, pf_mask 0x80, 2024-06-03, rev 0x0435, size 223232 sig 0x000906a4, pf_mask 0x80, 2024-06-03, rev 0x0435, size 223232 sig 0x000a06a4, pf_mask 0xe6, 2024-08-02, rev 0x0020, size 138240 sig 0x000b0671, pf_mask 0x32, 2024-08-29, rev 0x012b, size 211968 sig 0x000b06a2, pf_mask 0xe0, 2024-05-29, rev 0x4123, size 220160 sig 0x000b06a3, pf_mask 0xe0, 2024-05-29, rev 0x4123, size 220160 sig 0x000b06a8, pf_mask 0xe0, 2024-05-29, rev 0x4123, size 220160 sig 0x000b06f2, pf_mask 0x07, 2024-05-29, rev 0x0037, size 224256 sig 0x000b06f5, pf_mask 0x07, 2024-05-29, rev 0x0037, size 224256 sig 0x000c06f1, pf_mask 0x87, 2024-06-20, rev 0x21000283, size 560128 sig 0x000c06f2, pf_mask 0x87, 2024-06-20, rev 0x21000283, size 560128
  • SECURITY UPDATE:
    • CVE-2024-21853, INTEL-SA-01101
    • CVE-2024-23918, CVE-2024-21820, INTEL-SA-01079
    • CVE-2024-24968, INTEL-SA-01097
    • CVE-2024-23984, INTEL-SA-01103
Record
CLSA-2025-1736502911
Updated
2026-11-02
OSVCLSA-2025-1736503077 No score

Fix of 5 CVEs

  • New microcode update packages from upstream up to 2024-11-12:
    • Updated microcodes: sig 0x000806f4, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f5, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f6, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f7, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f8, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x00090672, pf_mask 0x07, 2024-05-29, rev 0x0037, size 224256 sig 0x00090675, pf_mask 0x07, 2024-05-29, rev 0x0037, size 224256 sig 0x000906a3, pf_mask 0x80, 2024-06-03, rev 0x0435, size 223232 sig 0x000906a4, pf_mask 0x80, 2024-06-03, rev 0x0435, size 223232 sig 0x000a06a4, pf_mask 0xe6, 2024-08-02, rev 0x0020, size 138240 sig 0x000b0671, pf_mask 0x32, 2024-08-29, rev 0x012b, size 211968 sig 0x000b06a2, pf_mask 0xe0, 2024-05-29, rev 0x4123, size 220160 sig 0x000b06a3, pf_mask 0xe0, 2024-05-29, rev 0x4123, size 220160 sig 0x000b06a8, pf_mask 0xe0, 2024-05-29, rev 0x4123, size 220160 sig 0x000b06f2, pf_mask 0x07, 2024-05-29, rev 0x0037, size 224256 sig 0x000b06f5, pf_mask 0x07, 2024-05-29, rev 0x0037, size 224256 sig 0x000c06f1, pf_mask 0x87, 2024-06-20, rev 0x21000283, size 560128 sig 0x000c06f2, pf_mask 0x87, 2024-06-20, rev 0x21000283, size 560128
  • SECURITY UPDATE:
    • CVE-2024-21853, INTEL-SA-01101
    • CVE-2024-23918, CVE-2024-21820, INTEL-SA-01079
    • CVE-2024-24968, INTEL-SA-01097
    • CVE-2024-23984, INTEL-SA-01103
Record
CLSA-2025-1736503077
Updated
2026-11-02
OSV No score

Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.

Record
CVE-2024-21820
Updated
2026-11-02
OSVMGASA-2024-0377 No score

Updated microcode packages fix security vulnerabilities

Improper Finite State Machines (FSMs) in the Hardware logic in some 4th and 5th Generation Intel® Xeon® Processors may allow an authorized user to potentially enable denial of service via local access. (CVE-2024-21853) Improper conditions check in some Intel® Xeon® processor memory controller configurations when using Intel® SGX may allow a privileged user to potentially enable escalation of privilege via local access. (CVE-2024-23918) Incorrect default permissions in some Intel® Xeon® processor memory controller configurations when using Intel® SGX may allow a privileged user to potentially enable escalation of privilege via local access. (CVE-2024-21820)

Record
MGASA-2024-0377
Updated
2026-11-02
OSVopenSUSE-SU-2024:14496-1 No score

ucode-intel-20241112-1.1 on GA media

These are all security issues fixed in the ucode-intel-20241112-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14496-1
Updated
2026-11-02
OSVSUSE-SU-2024:3995-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)

    • CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via local access.
    • CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    • CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    • CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access.
    • CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access.
    • Update for functional issues. New Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/07 | 00000036 | 00000037 | Core Gen12 | ADL | H0 | 06-97-05/07 | 00000036 | 00000037 | Core Gen12 | ADL | L0 | 06-9a-03/80 | 00000434 | 00000435 | Core Gen12 | ADL | R0 | 06-9a-04/80 | 00000434 | 00000435 | Core Gen12 | EMR-SP | A0 | 06-cf-01/87 | 21000230 | 21000283 | Xeon Scalable Gen5 | EMR-SP | A1 | 06-cf-02/87 | 21000230 | 21000283 | Xeon Scalable Gen5 | MTL | C0 | 06-aa-04/e6 | 0000001f | 00000020 | Core™ Ultra Processor | RPL-H/P/PX 6+8 | J0 | 06-ba-02/e0 | 00004122 | 00004123 | Core Gen13 | RPL-HX/S | C0 | 06-bf-02/07 | 00000036 | 00000037 | Core Gen13/Gen14 | RPL-S | H0 | 06-bf-05/07 | 00000036 | 00000037 | Core Gen13/Gen14 | RPL-U 2+8 | Q0 | 06-ba-03/e0 | 00004122 | 00004123 | Core Gen13 | SPR-SP | E3 | 06-8f-06/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 | SPR-SP | E4/S2 | 06-8f-07/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 New Disclosures Updated in Prior Releases: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ICL-D | B0 | 06-6c-01/10 | 010002b0 | N/A | Xeon D-17xx/D-18xx, D-27xx/D-28xx | ICX-SP | Dx/M1 | 06-6a-06/87 | 0d0003e7 | N/A | Xeon Scalable Gen3

  • Intel CPU Microcode was updated to the 20241029 release Update for functional issues. Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | RPL-E/HX/S | B0 | 06-b7-01/32 | 00000129 | 0000012b | Core Gen13/Gen14

Record
SUSE-SU-2024:3995-1
Updated
2026-11-02
OSVSUSE-SU-2024:4053-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)

    • CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via local access.
    • CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    • CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    • CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access.
    • CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access.
    • Update for functional issues. New Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/07 | 00000036 | 00000037 | Core Gen12 | ADL | H0 | 06-97-05/07 | 00000036 | 00000037 | Core Gen12 | ADL | L0 | 06-9a-03/80 | 00000434 | 00000435 | Core Gen12 | ADL | R0 | 06-9a-04/80 | 00000434 | 00000435 | Core Gen12 | EMR-SP | A0 | 06-cf-01/87 | 21000230 | 21000283 | Xeon Scalable Gen5 | EMR-SP | A1 | 06-cf-02/87 | 21000230 | 21000283 | Xeon Scalable Gen5 | MTL | C0 | 06-aa-04/e6 | 0000001f | 00000020 | Core™ Ultra Processor | RPL-H/P/PX 6+8 | J0 | 06-ba-02/e0 | 00004122 | 00004123 | Core Gen13 | RPL-HX/S | C0 | 06-bf-02/07 | 00000036 | 00000037 | Core Gen13/Gen14 | RPL-S | H0 | 06-bf-05/07 | 00000036 | 00000037 | Core Gen13/Gen14 | RPL-U 2+8 | Q0 | 06-ba-03/e0 | 00004122 | 00004123 | Core Gen13 | SPR-SP | E3 | 06-8f-06/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 | SPR-SP | E4/S2 | 06-8f-07/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 New Disclosures Updated in Prior Releases: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ICL-D | B0 | 06-6c-01/10 | 010002b0 | N/A | Xeon D-17xx/D-18xx, D-27xx/D-28xx | ICX-SP | Dx/M1 | 06-6a-06/87 | 0d0003e7 | N/A | Xeon Scalable Gen3

  • Intel CPU Microcode was updated to the 20241029 release Update for functional issues. Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | RPL-E/HX/S | B0 | 06-b7-01/32 | 00000129 | 0000012b | Core Gen13/Gen14

Record
SUSE-SU-2024:4053-1
Updated
2026-11-02
OSVSUSE-SU-2025:1032-1 No score

Security update for microcode_ctl

This update for microcode_ctl fixes the following issues:

  • CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware Logic for some Intel Processors may allow privileged user to potentially enable denial of service via local access. (bsc#1237096)
  • CVE-2024-36293: A potential security vulnerability in some Intel Software Guard Extensions (Intel SGX) Platforms may allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. (bsc#1237096)
  • CVE-2024-39355: A potential security vulnerability in some 13th and 14th Generation Intel Core Processors may allow denial of service. Intel is releasing microcode and UEFI reference code updates to mitigate this potential vulnerability. (bsc#1237096)
  • CVE-2024-37020: A potential security vulnerability in the Intel Data Streaming Accelerator (Intel DSA) for some Intel Xeon Processors may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. (bsc#1237096)
  • CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via local access. (bsc#1233313)
  • CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access. (bsc#1233313)
  • CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access. (bsc#1233313)
  • CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access. (bsc#1230400)
  • CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access. (bsc#1230400)
  • CVE-2024-24853: Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access. (bsc#1229129)
  • CVE-2024-25939: Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access. (bsc#1229129)
  • CVE-2024-24980: Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. (bsc#1229129)
  • CVE-2023-42667: Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. (bsc#1229129)
  • CVE-2023-49141: Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. (bsc#1229129)
  • CVE-2023-45733: Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access. (bsc#1224277)
  • CVE-2023-46103: Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access. (bsc#1224277)
  • CVE-2023-45745: Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of…
Record
SUSE-SU-2025:1032-1
Updated
2026-11-02
OSVSUSE-SU-2025:20092-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)

    • CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via local access.
    • CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    • CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    • CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access.
    • CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access.
    • Update for functional issues.

    Updated Platforms:

    | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/07 | 00000036 | 00000037 | Core Gen12 | ADL | H0 | 06-97-05/07 | 00000036 | 00000037 | Core Gen12 | ADL | L0 | 06-9a-03/80 | 00000434 | 00000435 | Core Gen12 | ADL | R0 | 06-9a-04/80 | 00000434 | 00000435 | Core Gen12 | EMR-SP | A0 | 06-cf-01/87 | 21000230 | 21000283 | Xeon Scalable Gen5 | EMR-SP | A1 | 06-cf-02/87 | 21000230 | 21000283 | Xeon Scalable Gen5 | MTL | C0 | 06-aa-04/e6 | 0000001f | 00000020 | Core™ Ultra Processor | RPL-H/P/PX 6+8 | J0 | 06-ba-02/e0 | 00004122 | 00004123 | Core Gen13 | RPL-HX/S | C0 | 06-bf-02/07 | 00000036 | 00000037 | Core Gen13/Gen14 | RPL-S | H0 | 06-bf-05/07 | 00000036 | 00000037 | Core Gen13/Gen14 | RPL-U 2+8 | Q0 | 06-ba-03/e0 | 00004122 | 00004123 | Core Gen13 | SPR-SP | E3 | 06-8f-06/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 | SPR-SP | E4/S2 | 06-8f-07/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4

    New Disclosures Updated in Prior Releases:

    | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ICL-D | B0 | 06-6c-01/10 | 010002b0 | N/A | Xeon D-17xx/D-18xx, D-27xx/D-28xx | ICX-SP | Dx/M1 | 06-6a-06/87 | 0d0003e7 | N/A | Xeon Scalable Gen3

  • Intel CPU Microcode was updated to the 20241029 release Update for functional issues.

    Updated Platforms:

    | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | RPL-E/HX/S | B0 | 06-b7-01/32 | 00000129 | 0000012b | Core Gen13/Gen14

Record
SUSE-SU-2025:20092-1
Updated
2026-11-02
OSVSUSE-SU-2025:20286-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Record
SUSE-SU-2025:20286-1
Updated
2026-11-02
OSVUSN-7149-1 No score

intel-microcode vulnerabilities

Avraham Shalev and Nagaraju N Kodalapura discovered that some Intel(R) Xeon(R) processors did not properly restrict access to the memory controller when using Intel(R) SGX. This may allow a local privileged attacker to further escalate their privileges. (CVE-2024-21820, CVE-2024-23918)

It was discovered that some 4th and 5th Generation Intel(R) Xeon(R) Processors did not properly implement finite state machines (FSMs) in hardware logic. THis may allow a local privileged attacker to cause a denial of service (system crash). (CVE-2024-21853)

It was discovered that some Intel(R) Processors did not properly restrict access to the Running Average Power Limit (RAPL) interface. This may allow a local privileged attacker to obtain sensitive information. (CVE-2024-23984)

It was discovered that some Intel(R) Processors did not properly implement finite state machines (FSMs) in hardware logic. This may allow a local privileged attacker to cause a denial of service (system crash). (CVE-2024-24968)

Record
USN-7149-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
intel-ucode
Alpaquita:23
 20230516a-r0 up to 20241112-r0
20241112-r0
intel-ucode
Alpaquita:stream
 20230214-r0 up to 20241112-r0
20241112-r0
intel-microcode
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 3.20241112.0ubuntu0.16.04.1+tuxcare.els1
3.20241112.0ubuntu0.16.04.1+tuxcare.els1
intel-microcode
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 3.20241112.0ubuntu0.18.04.1+tuxcare.els1
3.20241112.0ubuntu0.18.04.1+tuxcare.els1
intel-microcode
Debian:12
 before 3.20241112.1~deb12u1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20241112.1~deb12u1
intel-microcode
Debian:13
 before 3.20241112.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20241112.1
intel-microcode
Debian:14
 before 3.20241112.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20241112.1
intel-microcode
Debian:11
From an advisory covering 3 CVEs
 before 3.20241112.1~deb11u1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20241112.1~deb11u1
microcode
Mageia:9
From an advisory covering 3 CVEs
 before 0.20241112-1.mga9.nonfree
0.20241112-1.mga9.nonfree
microcode_ctl
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 20241112-1.oe2203sp3
20241112-1.oe2203sp3
Show 44 moreShow less
Affected packages
PackageAffectedFixed
microcode_ctl
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 20241112-1.oe2003sp4
20241112-1.oe2003sp4
microcode_ctl
openEuler:22.03-LTS-SP1
From an advisory covering 2 CVEs
 before 20241112-1.oe2203sp1
20241112-1.oe2203sp1
microcode_ctl
openEuler:24.03-LTS
From an advisory covering 2 CVEs
 before 20241112-1.oe2403
20241112-1.oe2403
microcode_ctl
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 20241112-1.oe2203sp4
20241112-1.oe2203sp4
ucode-intel
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 5 CVEs
 before 20241112-146.1
20241112-146.1
ucode-intel
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 5 CVEs
 before 20241112-146.1
20241112-146.1
ucode-intel
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Manager Proxy 4.3
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Manager Server 4.3
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
SUSE:Enterprise Storage 7.1
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
openSUSE:Leap Micro 5.5
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
openSUSE:Leap 15.5
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
ucode-intel
openSUSE:Leap 15.6
From an advisory covering 5 CVEs
 before 20241112-150200.50.1
20241112-150200.50.1
microcode_ctl
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 27 CVEs
 before 1.17-102.83.81.1
1.17-102.83.81.1
ucode-intel
SUSE:Linux Micro 6.0
From an advisory covering 5 CVEs
 before 20241112-1.1
20241112-1.1
ucode-intel
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 20250211-slfo.1.1_2.1
20250211-slfo.1.1_2.1
intel-microcode
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2
Show 17 moreShow less
3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.13.20191112-0ubuntu0.14.04.23.20191115.1ubuntu0.14.04.13.20191115.1ubuntu0.14.04.23.20200609.0ubuntu0.14.04.03.20200609.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.23.20210608.0ubuntu0.14.04.1+esm1
 None known
intel-microcode
Ubuntu:Pro:16.04:LTS
 before 3.20241112.0ubuntu0.16.04.1+esm1, plus listed versions
3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1
Show 23 moreShow less
3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.23.20210216.0ubuntu0.16.04.13.20210608.0ubuntu0.16.04.1+esm13.20220510.0ubuntu0.16.04.1+esm13.20230214.0ubuntu0.16.04.1+esm13.20230808.0ubuntu0.16.04.1+esm13.20231114.0ubuntu0.16.04.1+esm13.20240514.0ubuntu0.16.04.1+esm13.20240813.0ubuntu0.16.04.1+esm23.20240910.0ubuntu0.16.04.1+esm1
3.20241112.0ubuntu0.16.04.1+esm1
intel-microcode
Ubuntu:Pro:18.04:LTS
 before 3.20241112.0ubuntu0.18.04.1+esm1, plus listed versions
3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1
Show 23 moreShow less
3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.23.20210216.0ubuntu0.18.04.13.20210608.0ubuntu0.18.04.13.20220510.0ubuntu0.18.04.13.20220809.0ubuntu0.18.04.13.20230214.0ubuntu0.18.04.13.20230808.0ubuntu0.18.04.1+esm13.20231114.0ubuntu0.18.04.1+esm13.20240514.0ubuntu0.18.04.1+esm13.20240813.0ubuntu0.18.04.1+esm23.20240910.0ubuntu0.18.04.1+esm1
3.20241112.0ubuntu0.18.04.1+esm1
intel-microcode
Ubuntu:20.04:LTS
 before 3.20241112.0ubuntu0.20.04.1, plus listed versions
3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0
Show 14 moreShow less
3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.23.20210216.0ubuntu0.20.04.13.20210608.0ubuntu0.20.04.13.20220510.0ubuntu0.20.04.13.20220809.0ubuntu0.20.04.13.20230214.0ubuntu0.20.04.13.20230808.0ubuntu0.20.04.13.20231114.0ubuntu0.20.04.13.20240514.0ubuntu0.20.04.13.20240813.0ubuntu0.20.04.23.20240910.0ubuntu0.20.04.1
3.20241112.0ubuntu0.20.04.1
intel-microcode
Ubuntu:22.04:LTS
 before 3.20241112.0ubuntu0.22.04.1, plus listed versions
3.20210608.2ubuntu13.20220510.0ubuntu0.22.04.13.20220809.0ubuntu0.22.04.13.20230214.0ubuntu0.22.04.13.20230808.0ubuntu0.22.04.1
Show 4 moreShow less
3.20231114.0ubuntu0.22.04.13.20240514.0ubuntu0.22.04.13.20240813.0ubuntu0.22.04.23.20240910.0ubuntu0.22.04.1
3.20241112.0ubuntu0.22.04.1
intel-microcode
Ubuntu:24.04:LTS
 before 3.20241112.0ubuntu0.24.04.1, plus listed versions
3.20230808.13.20231114.0ubuntu13.20231114.13.20240312.13.20240312.1build13.20240514.0ubuntu0.24.04.13.20240813.0ubuntu0.24.04.23.20240910.0ubuntu0.24.04.1
3.20241112.0ubuntu0.24.04.1
intel-microcode
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 3.20241112.0ubuntu0.16.04.1+esm1, plus listed versions
3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1
Show 23 moreShow less
3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.23.20210216.0ubuntu0.16.04.13.20210608.0ubuntu0.16.04.1+esm13.20220510.0ubuntu0.16.04.1+esm13.20230214.0ubuntu0.16.04.1+esm13.20230808.0ubuntu0.16.04.1+esm13.20231114.0ubuntu0.16.04.1+esm13.20240514.0ubuntu0.16.04.1+esm13.20240813.0ubuntu0.16.04.1+esm23.20240910.0ubuntu0.16.04.1+esm1
3.20241112.0ubuntu0.16.04.1+esm1
intel-microcode
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 3.20241112.0ubuntu0.18.04.1+esm1, plus listed versions
3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1
Show 23 moreShow less
3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.23.20210216.0ubuntu0.18.04.13.20210608.0ubuntu0.18.04.13.20220510.0ubuntu0.18.04.13.20220809.0ubuntu0.18.04.13.20230214.0ubuntu0.18.04.13.20230808.0ubuntu0.18.04.1+esm13.20231114.0ubuntu0.18.04.1+esm13.20240514.0ubuntu0.18.04.1+esm13.20240813.0ubuntu0.18.04.1+esm23.20240910.0ubuntu0.18.04.1+esm1
3.20241112.0ubuntu0.18.04.1+esm1
intel-microcode
Ubuntu:20.04:LTS
From an advisory covering 5 CVEs
 before 3.20241112.0ubuntu0.20.04.1, plus listed versions
3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0
Show 14 moreShow less
3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.23.20210216.0ubuntu0.20.04.13.20210608.0ubuntu0.20.04.13.20220510.0ubuntu0.20.04.13.20220809.0ubuntu0.20.04.13.20230214.0ubuntu0.20.04.13.20230808.0ubuntu0.20.04.13.20231114.0ubuntu0.20.04.13.20240514.0ubuntu0.20.04.13.20240813.0ubuntu0.20.04.23.20240910.0ubuntu0.20.04.1
3.20241112.0ubuntu0.20.04.1
intel-microcode
Ubuntu:22.04:LTS
From an advisory covering 5 CVEs
 before 3.20241112.0ubuntu0.22.04.1, plus listed versions
3.20210608.2ubuntu13.20220510.0ubuntu0.22.04.13.20220809.0ubuntu0.22.04.13.20230214.0ubuntu0.22.04.13.20230808.0ubuntu0.22.04.1
Show 4 moreShow less
3.20231114.0ubuntu0.22.04.13.20240514.0ubuntu0.22.04.13.20240813.0ubuntu0.22.04.23.20240910.0ubuntu0.22.04.1
3.20241112.0ubuntu0.22.04.1
intel-microcode
Ubuntu:24.04:LTS
From an advisory covering 5 CVEs
 before 3.20241112.0ubuntu0.24.04.1, plus listed versions
3.20230808.13.20231114.0ubuntu13.20231114.13.20240312.13.20240312.1build13.20240514.0ubuntu0.24.04.13.20240813.0ubuntu0.24.04.23.20240910.0ubuntu0.24.04.1
3.20241112.0ubuntu0.24.04.1
ucode-intel
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 20241112-1.1
20241112-1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-21820 is a high vulnerability (CVSS 8.5) in Intel 3rd Generation Intel Xeon Scalable Processor Family, published November 13, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in intel-ucode 20241112-r0.

References

Show 57 moreShow less
This page doesn't list everything

Left out here: 573 versions and the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open