Every CVESearch/Get API key

CVE-2020-24489

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially...

8.8 HighFix available

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.35%Down 0.1 points since Jun 10, 2021
90%50%10%1%

What each source reports

NVD Score used8.8

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

Record
CVE-2020-24489
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-459
Updated
2026-11-02
CVE ListNo score

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

Record
CVE-2020-24489
Updated
2026-11-02
EUVDEUVD-2020-17209No score

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

Record
EUVD-2020-17209
Updated
2026-11-02
GitHub AdvisoriesGHSA-v4xf-4525-wqq98.8

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially...

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

Record
GHSA-v4xf-4525-wqq9
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-459
Updated
2026-11-02
OSVALPINE-CVE-2020-244898.8

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

Record
ALPINE-CVE-2020-24489
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-03
OSVBELL-CVE-2020-244898.8

CVE-2020-24489 does not affect BellSoft software

Record
BELL-CVE-2020-24489
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
Show 40 moreShow less
OSV8.8

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

Record
CVE-2020-24489
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-244898.8

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

Record
DEBIAN-CVE-2020-24489
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2022-17738.8

microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs.

Security Fix(es):

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.(CVE-2020-24489)

Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.(CVE-2020-24513)

Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.(CVE-2021-0146)

Record
OESA-2022-1773
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:22998.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:2299
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:23008.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:2300
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:23018.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:2301
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:23028.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:2302
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:23038.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:2303
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:23048.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:2304
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:23058.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:2305
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:23068.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:2306
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:23078.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:2307
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:23088.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:2308
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:25199.8

Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.16

Record
RHSA-2021:2519
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:25229.8

Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.6]

Record
RHSA-2021:2522
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:30278.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3027
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:30288.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3028
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:30298.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3029
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:31768.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3176
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:32558.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3255
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:33178.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3317
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:33228.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3322
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:33238.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3323
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:33648.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3364
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2021:23088.8

Important: microcode_ctl security, bug fix and enhancement update

The microcode_ctl packages provide microcode updates for Intel.

Security Fix(es):

  • hw: vt-d related privilege escalation (CVE-2020-24489)

  • hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

  • hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

  • hw: information disclosure on some Intel Atom processors (CVE-2020-24513)

Bug Fix(es) and Enhancement(s):

  • Update Intel CPU microcode to microcode-20210525 release
Record
RLSA-2021:2308
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2021:30278.8

Important: microcode_ctl security, bug fix and enhancement update

The microcode_ctl packages provide microcode updates for Intel.

Security Fix(es):

  • hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

  • hw: Vector Register Data Sampling (CVE-2020-0548)

  • hw: L1D Cache Eviction Sampling (CVE-2020-0549)

  • hw: vt-d related privilege escalation (CVE-2020-24489)

  • hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

  • hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

  • hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  • hw: Vector Register Leakage-Active (CVE-2020-8696)

  • hw: Fast forward store predictor (CVE-2020-8698)

Record
RLSA-2021:3027
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-244898.8

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

Record
UBUNTU-CVE-2020-24489
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2021-1632262337No score

Fix of CVE: CVE-2020-24513, CVE-2020-24489, CVE-2020-24512, CVE-2020-24511

  • Do not use "grep -q" in a pipe in check_caveats.
  • Update Intel CPU microcode to microcode-20210608 release:
    • Fixes in releasenote.md file.
  • Update Intel CPU microcode to microcode-20210525 release, addresses CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513 (#1962659, #1962709, #1962729, #1962675):
    • Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
    • Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
    • Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
    • Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    • Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04) at revision 0xb00000f;
    • Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05) at revision 0xb00000f;
    • Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    • Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
    • Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
    • Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
    • Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
    • Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
    • Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
    • Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up to 0xb00003e;
    • Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up to 0x2006b06;
    • Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
    • Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
    • Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up to 0xea;
    • Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up to 0xea;
    • Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up to 0xea;
    • Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up to 0xea;
    • Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from revision 0xde up to 0xea;
    • Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up to 0xea;
    • Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up to 0xea;
    • Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up to 0xea;
    • Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up to 0xea;
    • Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up to 0xea;
    • Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode from revision 0x44 up to 0x46;
    • Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up to 0x19;
    • Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159 up to 0x100015b;
    • Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006 up to 0x4003102;
    • Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision 0x5003006 up to 0x5003102;
    • Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e up…
Record
CLSA-2021-1632262337
Updated
2026-11-02
OSVCLSA-2021-1634922771No score

Fixed CVEs in microcode_ctl: CVE-2020-24511, CVE-2020-24512, CVE-2020-24489, CVE-2020-24513

  • Do not use "grep -q" in a pipe in check_caveats.
  • Update Intel CPU microcode to microcode-20210608 release:
    • Fixes in releasenote.md file.
  • Update Intel CPU microcode to microcode-20210525 release, addresses CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513 (#1962659, #1962709, #1962729, #1962675):
    • Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
    • Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
    • Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
    • Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    • Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04) at revision 0xb00000f;
    • Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05) at revision 0xb00000f;
    • Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    • Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
    • Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
    • Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
    • Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
    • Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
    • Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
    • Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up to 0xb00003e;
    • Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up to 0x2006b06;
    • Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
    • Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
    • Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up to 0xea;
    • Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up to 0xea;
    • Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up to 0xea;
    • Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up to 0xea;
    • Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from revision 0xde up to 0xea;
    • Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up to 0xea;
    • Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up to 0xea;
    • Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up to 0xea;
    • Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up to 0xea;
    • Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up to 0xea;
    • Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode from revision 0x44 up to 0x46;
    • Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up to 0x19;
    • Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159 up to 0x100015b;
    • Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006 up to 0x4003102;
    • Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision 0x5003006 up to 0x5003102;
    • Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e up…
Record
CLSA-2021-1634922771
Updated
2026-11-02
OSVMGASA-2021-0256No score

Updated microcode packages fix security vulnerabilities

Updated microcodes for Intel processors, fixing various functional issues, and at least the following security issues:

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access (CVE-2020-24489).

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access (CVE-2020-24511).

Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access (CVE-2020-24513).

For more info about this update, see the refenced links.

Record
MGASA-2021-0256
Updated
2026-11-02
OSVopenSUSE-SU-2021:0876-1No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20210608 release.

Other fixes:

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | |…

Record
openSUSE-SU-2021:0876-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1933-1No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20210608 release.

Other fixes:

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | | 03000010 |…

Record
openSUSE-SU-2021:1933-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11478-1No score

ucode-intel-20210608-1.2 on GA media

These are all security issues fixed in the ucode-intel-20210608-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11478-1
Updated
2026-11-02
OSVSUSE-SU-2021:14758-1No score

Security update for microcode_ctl

This update for microcode_ctl fixes the following issues:

Updated to Intel CPU Microcode 20210525 release:

  • CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (bsc#1179833)
  • CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (bsc#1179836)
  • CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837)
  • CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (bsc#1179839)
Record
SUSE-SU-2021:14758-1
Updated
2026-11-02
OSVSUSE-SU-2021:1929-1No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20210608 release.

Other fixes:

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | | 03000010 | Xeon…

Record
SUSE-SU-2021:1929-1
Updated
2026-11-02
OSVSUSE-SU-2021:1930-1No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20210608 release.

Other fixes:

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | | 03000010 | Xeon…

Record
SUSE-SU-2021:1930-1
Updated
2026-11-02
OSVSUSE-SU-2021:1931-1No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20210608 release.

Other fixes:

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | |…

Record
SUSE-SU-2021:1931-1
Updated
2026-11-02
OSVSUSE-SU-2021:1932-1No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Other fixes:

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | |…

Record
SUSE-SU-2021:1932-1
Updated
2026-11-02
OSVSUSE-SU-2021:1933-1No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20210608 release.

Other fixes:

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | | 03000010 |…

Record
SUSE-SU-2021:1933-1
Updated
2026-11-02
OSVUSN-4985-1No score

intel-microcode vulnerabilities

It was discovered that some Intel processors may not properly invalidate cache entries used by Intel Virtualization Technology for Directed I/O (VT-d). This may allow a local user to perform a privilege escalation attack. (CVE-2020-24489)

Joseph Nuzman discovered that some Intel processors may not properly apply EIBRS mitigations (originally developed for CVE-2017-5715) and hence may allow unauthorized memory reads via sidechannel attacks. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2020-24511)

Travis Downs discovered that some Intel processors did not properly flush cache-lines for trivial-data values. This may allow an unauthorized user to infer the presence of these trivial-data-cache-lines via timing sidechannel attacks. A local attacker could use this to expose sensitive information. (CVE-2020-24512)

It was discovered that certain Intel Atom processors could expose memory contents stored in microarchitectural buffers. A local attacker could use this to expose sensitive information. (CVE-2020-24513)

Record
USN-4985-1
Updated
2026-11-02

Affected products

Show 202 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
intel-ucode
Alpine:v3.12
before 20210608-r0
20210608-r0
intel-ucode
Alpine:v3.13
before 20210608-r0
20210608-r0
intel-ucode
Alpine:v3.14
before 20210608-r0
20210608-r0
intel-ucode
Alpine:v3.15
before 20210608-r0
20210608-r0
intel-ucode
Alpine:v3.16
before 20210608-r0
20210608-r0
intel-ucode
Alpine:v3.17
before 20210608-r0
20210608-r0
intel-ucode
Alpine:v3.18
before 20210608-r0
20210608-r0
intel-ucode
Alpine:v3.19
before 20210608-r0
20210608-r0
intel-ucode
Alpine:v3.20
before 20210608-r0
20210608-r0
intel-ucode
Alpine:v3.21
before 20210608-r0
20210608-r0
Show 120 moreShow less
Affected packages
PackageAffectedFixed
intel-ucode
Alpine:v3.22
before 20210608-r0
20210608-r0
intel-ucode
Alpine:v3.23
before 20210608-r0
20210608-r0
intel-ucode
Alpine:v3.24
before 20210608-r0
20210608-r0
microcode_ctl
TuxCare:CentOS:6
From an advisory covering 4 CVEs
before 2:1.17-33.34.el6.cloudlinux.els
2:1.17-33.34.el6.cloudlinux.els
microcode_ctl
TuxCare:OracleLinux:6
From an advisory covering 4 CVEs
before 2:1.17-33.34.el6.cloudlinux.els
2:1.17-33.34.el6.cloudlinux.els
intel-microcode
Debian:12
before 3.20210608.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20210608.1
intel-microcode
Debian:13
before 3.20210608.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20210608.1
intel-microcode
Debian:14
before 3.20210608.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20210608.1
intel-microcode
Debian:9
From an advisory covering 4 CVEs
before 3.20210608.2~deb9u2, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20210608.2~deb9u2
intel-microcode
Debian:10
From an advisory covering 4 CVEs
before 3.20210608.2~deb10u1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20210608.2~deb10u1
microcode
Mageia:7
From an advisory covering 3 CVEs
before 0.20210608-1.mga7.nonfree
0.20210608-1.mga7.nonfree
microcode
Mageia:8
From an advisory covering 3 CVEs
before 0.20210608-1.mga8.nonfree
0.20210608-1.mga8.nonfree
microcode_ctl
openEuler:20.03-LTS-SP1
From an advisory covering 3 CVEs
before 2.1-36.oe1
2.1-36.oe1
microcode_ctl
Red Hat:rhel_els:6
From an advisory covering 4 CVEs
before 2:1.17-33.33.el6_10
2:1.17-33.33.el6_10
microcode_ctl-debuginfo
Red Hat:rhel_els:6
From an advisory covering 4 CVEs
before 2:1.17-33.33.el6_10
2:1.17-33.33.el6_10
microcode_ctl
Red Hat:rhel_aus:7.2::server
From an advisory covering 4 CVEs
before 2:2.1-12.37.el7_2
2:2.1-12.37.el7_2
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.2::server
From an advisory covering 4 CVEs
before 2:2.1-12.37.el7_2
2:2.1-12.37.el7_2
microcode_ctl
Red Hat:rhel_aus:7.4::server
From an advisory covering 4 CVEs
before 2:2.1-22.39.el7_4
2:2.1-22.39.el7_4
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.4::server
From an advisory covering 4 CVEs
before 2:2.1-22.39.el7_4
2:2.1-22.39.el7_4
microcode_ctl
Red Hat:rhel_e4s:7.4::server
From an advisory covering 4 CVEs
before 2:2.1-22.39.el7_4
2:2.1-22.39.el7_4
microcode_ctl-debuginfo
Red Hat:rhel_e4s:7.4::server
From an advisory covering 4 CVEs
before 2:2.1-22.39.el7_4
2:2.1-22.39.el7_4
microcode_ctl
Red Hat:rhel_tus:7.4::server
From an advisory covering 4 CVEs
before 2:2.1-22.39.el7_4
2:2.1-22.39.el7_4
microcode_ctl-debuginfo
Red Hat:rhel_tus:7.4::server
From an advisory covering 4 CVEs
before 2:2.1-22.39.el7_4
2:2.1-22.39.el7_4
microcode_ctl
Red Hat:rhel_aus:7.3::server
From an advisory covering 4 CVEs
before 2:2.1-16.40.el7_3
2:2.1-16.40.el7_3
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.3::server
From an advisory covering 4 CVEs
before 2:2.1-16.40.el7_3
2:2.1-16.40.el7_3
microcode_ctl
Red Hat:rhel_aus:7.6::server
From an advisory covering 4 CVEs
before 2:2.1-47.21.el7_6
2:2.1-47.21.el7_6
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.6::server
From an advisory covering 4 CVEs
before 2:2.1-47.21.el7_6
2:2.1-47.21.el7_6
microcode_ctl
Red Hat:rhel_e4s:7.6::server
From an advisory covering 4 CVEs
before 2:2.1-47.21.el7_6
2:2.1-47.21.el7_6
microcode_ctl-debuginfo
Red Hat:rhel_e4s:7.6::server
From an advisory covering 4 CVEs
before 2:2.1-47.21.el7_6
2:2.1-47.21.el7_6
microcode_ctl
Red Hat:rhel_tus:7.6::server
From an advisory covering 4 CVEs
before 2:2.1-47.21.el7_6
2:2.1-47.21.el7_6
microcode_ctl-debuginfo
Red Hat:rhel_tus:7.6::server
From an advisory covering 4 CVEs
before 2:2.1-47.21.el7_6
2:2.1-47.21.el7_6
microcode_ctl
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 4 CVEs
before 2:2.1-53.16.el7_7
2:2.1-53.16.el7_7
microcode_ctl-debuginfo
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 4 CVEs
before 2:2.1-53.16.el7_7
2:2.1-53.16.el7_7
microcode_ctl
Red Hat:rhel_eus:7.7::server
From an advisory covering 4 CVEs
before 2:2.1-53.16.el7_7
2:2.1-53.16.el7_7
microcode_ctl-debuginfo
Red Hat:rhel_eus:7.7::server
From an advisory covering 4 CVEs
before 2:2.1-53.16.el7_7
2:2.1-53.16.el7_7
microcode_ctl
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
before 2:2.1-73.9.el7_9
2:2.1-73.9.el7_9
microcode_ctl-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
before 2:2.1-73.9.el7_9
2:2.1-73.9.el7_9
microcode_ctl
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
before 2:2.1-73.9.el7_9
2:2.1-73.9.el7_9
microcode_ctl-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
before 2:2.1-73.9.el7_9
2:2.1-73.9.el7_9
microcode_ctl
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
before 2:2.1-73.9.el7_9
2:2.1-73.9.el7_9
microcode_ctl-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
before 2:2.1-73.9.el7_9
2:2.1-73.9.el7_9
microcode_ctl
Red Hat:rhel_eus:8.1::baseos
From an advisory covering 4 CVEs
before 4:20190618-1.20210525.1.el8_1
4:20190618-1.20210525.1.el8_1
microcode_ctl
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 4 CVEs
before 4:20191115-4.20210525.1.el8_2
4:20191115-4.20210525.1.el8_2
microcode_ctl
Red Hat:enterprise_linux:8::baseos
From an advisory covering 4 CVEs
before 4:20210216-1.20210525.1.el8_4
4:20210216-1.20210525.1.el8_4
redhat-virtualization-host
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 3 CVEs
before 0:4.3.16-20210615.0.el7_9
0:4.3.16-20210615.0.el7_9
redhat-virtualization-host-image-update
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 3 CVEs
before 0:4.3.16-20210615.0.el7_9
0:4.3.16-20210615.0.el7_9
redhat-virtualization-host
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 4 CVEs
before 0:4.4.6-20210615.0.el8_4
0:4.4.6-20210615.0.el8_4
redhat-virtualization-host-image-update
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 4 CVEs
before 0:4.4.6-20210615.0.el8_4
0:4.4.6-20210615.0.el8_4
microcode_ctl
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
before 4:20210216-1.20210608.1.el8_4
4:20210216-1.20210608.1.el8_4
microcode_ctl
Red Hat:enterprise_linux:7::client
From an advisory covering 9 CVEs
before 2:2.1-73.11.el7_9
2:2.1-73.11.el7_9
microcode_ctl-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 9 CVEs
before 2:2.1-73.11.el7_9
2:2.1-73.11.el7_9
microcode_ctl
Red Hat:enterprise_linux:7::server
From an advisory covering 9 CVEs
before 2:2.1-73.11.el7_9
2:2.1-73.11.el7_9
microcode_ctl-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 9 CVEs
before 2:2.1-73.11.el7_9
2:2.1-73.11.el7_9
microcode_ctl
Red Hat:enterprise_linux:7::workstation
From an advisory covering 9 CVEs
before 2:2.1-73.11.el7_9
2:2.1-73.11.el7_9
microcode_ctl-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 9 CVEs
before 2:2.1-73.11.el7_9
2:2.1-73.11.el7_9
microcode_ctl
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 9 CVEs
before 2:2.1-53.18.el7_7
2:2.1-53.18.el7_7
microcode_ctl-debuginfo
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 9 CVEs
before 2:2.1-53.18.el7_7
2:2.1-53.18.el7_7
microcode_ctl
Red Hat:rhel_eus:7.7::server
From an advisory covering 9 CVEs
before 2:2.1-53.18.el7_7
2:2.1-53.18.el7_7
microcode_ctl-debuginfo
Red Hat:rhel_eus:7.7::server
From an advisory covering 9 CVEs
before 2:2.1-53.18.el7_7
2:2.1-53.18.el7_7
microcode_ctl
Red Hat:rhel_eus:8.1::baseos
From an advisory covering 9 CVEs
before 4:20190618-1.20210608.1.el8_1
4:20190618-1.20210608.1.el8_1
microcode_ctl
Red Hat:rhel_aus:7.4::server
From an advisory covering 9 CVEs
before 2:2.1-22.41.el7_4
2:2.1-22.41.el7_4
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.4::server
From an advisory covering 9 CVEs
before 2:2.1-22.41.el7_4
2:2.1-22.41.el7_4
microcode_ctl
Red Hat:rhel_e4s:7.4::server
From an advisory covering 9 CVEs
before 2:2.1-22.41.el7_4
2:2.1-22.41.el7_4
microcode_ctl-debuginfo
Red Hat:rhel_e4s:7.4::server
From an advisory covering 9 CVEs
before 2:2.1-22.41.el7_4
2:2.1-22.41.el7_4
microcode_ctl
Red Hat:rhel_tus:7.4::server
From an advisory covering 9 CVEs
before 2:2.1-22.41.el7_4
2:2.1-22.41.el7_4
microcode_ctl-debuginfo
Red Hat:rhel_tus:7.4::server
From an advisory covering 9 CVEs
before 2:2.1-22.41.el7_4
2:2.1-22.41.el7_4
microcode_ctl
Red Hat:rhel_aus:7.6::server
From an advisory covering 9 CVEs
before 2:2.1-47.23.el7_6
2:2.1-47.23.el7_6
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.6::server
From an advisory covering 9 CVEs
before 2:2.1-47.23.el7_6
2:2.1-47.23.el7_6
microcode_ctl
Red Hat:rhel_e4s:7.6::server
From an advisory covering 9 CVEs
before 2:2.1-47.23.el7_6
2:2.1-47.23.el7_6
microcode_ctl-debuginfo
Red Hat:rhel_e4s:7.6::server
From an advisory covering 9 CVEs
before 2:2.1-47.23.el7_6
2:2.1-47.23.el7_6
microcode_ctl
Red Hat:rhel_tus:7.6::server
From an advisory covering 9 CVEs
before 2:2.1-47.23.el7_6
2:2.1-47.23.el7_6
microcode_ctl-debuginfo
Red Hat:rhel_tus:7.6::server
From an advisory covering 9 CVEs
before 2:2.1-47.23.el7_6
2:2.1-47.23.el7_6
microcode_ctl
Red Hat:rhel_aus:7.3::server
From an advisory covering 9 CVEs
before 2:2.1-16.42.el7_3
2:2.1-16.42.el7_3
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.3::server
From an advisory covering 9 CVEs
before 2:2.1-16.42.el7_3
2:2.1-16.42.el7_3
microcode_ctl
Red Hat:rhel_aus:7.2::server
From an advisory covering 9 CVEs
before 2:2.1-12.39.el7_2
2:2.1-12.39.el7_2
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.2::server
From an advisory covering 9 CVEs
before 2:2.1-12.39.el7_2
2:2.1-12.39.el7_2
microcode_ctl
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 9 CVEs
before 4:20191115-4.20210608.1.el8_2
4:20191115-4.20210608.1.el8_2
microcode_ctl
Rocky Linux:8
From an advisory covering 4 CVEs
before 4:20210216-1.20210525.1.el8_4
4:20210216-1.20210525.1.el8_4
microcode_ctl
Rocky Linux:8
From an advisory covering 9 CVEs
before 4:20210216-1.20210608.1.el8_4
4:20210216-1.20210608.1.el8_4
microcode_ctl
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 4 CVEs
before 1.17-102.83.71.1
1.17-102.83.71.1
microcode_ctl
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 4 CVEs
before 1.17-102.83.71.1
1.17-102.83.71.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 4 CVEs
before 20210525-3.35.1
20210525-3.35.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 4 CVEs
before 20210525-3.35.1
20210525-3.35.1
ucode-intel
SUSE:HPE Helion OpenStack 8
From an advisory covering 4 CVEs
before 20210525-13.90.1
20210525-13.90.1
ucode-intel
SUSE:OpenStack Cloud 8
From an advisory covering 4 CVEs
before 20210525-13.90.1
20210525-13.90.1
ucode-intel
SUSE:OpenStack Cloud 9
From an advisory covering 4 CVEs
before 20210525-13.90.1
20210525-13.90.1
ucode-intel
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 4 CVEs
before 20210525-13.90.1
20210525-13.90.1
ucode-intel
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 4 CVEs
before 20210525-13.90.1
20210525-13.90.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 4 CVEs
before 20210525-13.90.1
20210525-13.90.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 4 CVEs
before 20210525-13.90.1
20210525-13.90.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 4 CVEs
before 20210525-13.90.1
20210525-13.90.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 4 CVEs
before 20210525-13.90.1
20210525-13.90.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 4 CVEs
before 20210525-13.90.1
20210525-13.90.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 4 CVEs
before 20210525-13.90.1
20210525-13.90.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 4 CVEs
before 20210525-3.67.1
20210525-3.67.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 4 CVEs
before 20210525-3.67.1
20210525-3.67.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 4 CVEs
before 20210525-3.67.1
20210525-3.67.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 4 CVEs
before 20210525-3.203.1
20210525-3.203.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 4 CVEs
before 20210525-3.203.1
20210525-3.203.1
ucode-intel
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 4 CVEs
before 20210525-3.203.1
20210525-3.203.1
ucode-intel
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 4 CVEs
before 20210525-3.203.1
20210525-3.203.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 4 CVEs
before 20210525-3.203.1
20210525-3.203.1
ucode-intel
SUSE:Manager Proxy 4.0
From an advisory covering 4 CVEs
before 20210525-3.203.1
20210525-3.203.1
ucode-intel
SUSE:Manager Retail Branch Server 4.0
From an advisory covering 4 CVEs
before 20210525-3.203.1
20210525-3.203.1
ucode-intel
SUSE:Manager Server 4.0
From an advisory covering 4 CVEs
before 20210525-3.203.1
20210525-3.203.1
ucode-intel
SUSE:Enterprise Storage 6
From an advisory covering 4 CVEs
before 20210525-3.203.1
20210525-3.203.1
ucode-intel
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 4 CVEs
before 20210525-7.1
20210525-7.1
ucode-intel
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 4 CVEs
before 20210525-7.1
20210525-7.1
ucode-intel
SUSE:Linux Enterprise Micro 5.0
From an advisory covering 4 CVEs
before 20210525-7.1
20210525-7.1
intel-microcode
Ubuntu:Pro:14.04:LTS
before 3.20210608.0ubuntu0.14.04.1+esm1, plus listed versions
1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2
Show 16 moreShow less
3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.13.20191112-0ubuntu0.14.04.23.20191115.1ubuntu0.14.04.13.20191115.1ubuntu0.14.04.23.20200609.0ubuntu0.14.04.03.20200609.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.2
3.20210608.0ubuntu0.14.04.1+esm1
intel-microcode
Ubuntu:Pro:16.04:LTS
before 3.20210608.0ubuntu0.16.04.1+esm1, plus listed versions
3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1
Show 15 moreShow less
3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.23.20210216.0ubuntu0.16.04.1
3.20210608.0ubuntu0.16.04.1+esm1
intel-microcode
Ubuntu:18.04:LTS
before 3.20210608.0ubuntu0.18.04.1, plus listed versions
3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1
Show 14 moreShow less
3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.23.20210216.0ubuntu0.18.04.1
3.20210608.0ubuntu0.18.04.1
intel-microcode
Ubuntu:20.04:LTS
before 3.20210608.0ubuntu0.20.04.1, plus listed versions
3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0
Show 5 moreShow less
3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.23.20210216.0ubuntu0.20.04.1
3.20210608.0ubuntu0.20.04.1
intel-microcode
Ubuntu:Pro:14.04:LTS
From an advisory covering 4 CVEs
before 3.20210608.0ubuntu0.14.04.1+esm1, plus listed versions
1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2
Show 16 moreShow less
3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.13.20191112-0ubuntu0.14.04.23.20191115.1ubuntu0.14.04.13.20191115.1ubuntu0.14.04.23.20200609.0ubuntu0.14.04.03.20200609.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.2
3.20210608.0ubuntu0.14.04.1+esm1
intel-microcode
Ubuntu:Pro:16.04:LTS
From an advisory covering 4 CVEs
before 3.20210608.0ubuntu0.16.04.1+esm1, plus listed versions
3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1
Show 15 moreShow less
3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.23.20210216.0ubuntu0.16.04.1
3.20210608.0ubuntu0.16.04.1+esm1
intel-microcode
Ubuntu:18.04:LTS
From an advisory covering 4 CVEs
before 3.20210608.0ubuntu0.18.04.1, plus listed versions
3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1
Show 14 moreShow less
3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.23.20210216.0ubuntu0.18.04.1
3.20210608.0ubuntu0.18.04.1
intel-microcode
Ubuntu:20.04:LTS
From an advisory covering 4 CVEs
before 3.20210608.0ubuntu0.20.04.1, plus listed versions
3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0
Show 5 moreShow less
3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.23.20210216.0ubuntu0.20.04.1
3.20210608.0ubuntu0.20.04.1
ucode-intel
openSUSE:Leap 15.2
From an advisory covering 4 CVEs
before 20210525-lp152.2.17.1
20210525-lp152.2.17.1
ucode-intel
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
before 20210525-7.1
20210525-7.1
ucode-intel
openSUSE:Tumbleweed
From an advisory covering 15 CVEs
before 20210608-1.2
20210608-1.2

History

History
RecordedChangedSources
affected, facts
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-24489 is a high vulnerability (CVSS 8.8) in Debian Linux, published June 8, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. Fixed in intel-ucode 20210608-r0.

References

Show 175 moreShow less
This page doesn't list everything

Left out here: 503 versions and the rest of 9 source descriptions. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open