Every CVE Search/ Get API key

CVE-2019-11139

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable...

6.0 MediumFix available

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.36%Down 1.7 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.0

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

Record
CVE-2019-11139
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-754
Updated
2026-11-02
CVE List No score

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

Record
CVE-2019-11139
Updated
2026-11-02
EUVDEUVD-2019-2843 No score

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

Record
EUVD-2019-2843
Updated
2026-11-03
GitHub AdvisoriesGHSA-m783-749c-c739 6.0

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable...

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

Record
GHSA-m783-749c-c739
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Weakness
CWE-754
Updated
2026-11-02
OSVBELL-CVE-2019-11139 6.0

CVE-2019-11139 does not affect BellSoft software

Record
BELL-CVE-2019-11139
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSV 6.0

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

Record
CVE-2019-11139
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
Show 22 moreShow less
OSVDEBIAN-CVE-2019-11139 6.0

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

Record
DEBIAN-CVE-2019-11139
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHEA-2019:3845 6.0

Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

Record
RHEA-2019:3845
CVSS 3.0
6.0 MediumCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHEA-2020:0635 6.0

Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

Record
RHEA-2020:0635
CVSS 3.0
6.0 MediumCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2019-11139 6.0

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

Record
UBUNTU-CVE-2019-11139
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2019-0334 No score

Updated microcode packages fix security vulnerabilities

This update provides the Intel 20191112 microcode release that adds the microcode side fixes and mitigations for at least the following security issues:

A flaw was found in the implementation of SGX around the access control of protected memory. A local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code is able to infer the contents of the SGX protected memory (CVE-2019-0117).

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. (CVE-2019-11135).

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access (CVE-2019-11139).

Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access (CVE-2018-12207).

TA Indirect Sharing Erratum (Information Leak)

Incomplete fixes for previous MDS mitigations (VERW)

SHUF* instruction implementation flaw (DoS)

EGETKEY Erratum

Conditional Jump Macro-fusion (DoS or Privilege Escalation)

For the software side fixes and mitigations of theese issues, the kernel must be updated to 5.3.13-1.mga7 (mga¤25686) or later.

Record
MGASA-2019-0334
Updated
2026-11-02
OSVMGASA-2019-0413 No score

Updated microcode packages fix security vulnerabilities

NOTE! This is a refresh of the 20191112 security update we released as MGASA-2019-0334. This update provides the Intel 20191115 microcode release that adds more microcode side fixes and mitigations for the Core Gen 6 to Core gen 10, some Xeon E series, adressing at least the following security issues:

A flaw was found in the implementation of SGX around the access control of protected memory. A local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code is able to infer the contents of the SGX protected memory (CVE-2019-0117).

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. (CVE-2019-11135).

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access (CVE-2019-11139).

Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access (CVE-2018-12207).

TA Indirect Sharing Erratum (Information Leak)

Incomplete fixes for previous MDS mitigations (VERW)

SHUF* instruction implementation flaw (DoS)

EGETKEY Erratum

Conditional Jump Macro-fusion (DoS or Privilege Escalation)

For the software side fixes and mitigations of theese issues, the kernel must be updated to 5.3.13-1.mga7 (mga¤25686) or later.

Record
MGASA-2019-0413
Updated
2026-11-02
OSVopenSUSE-SU-2019:2504-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Updated to 20191112 security release (bsc#1155988)
    • Processor Identifier Version Products
    • Model Stepping F-MO-S/PI Old->New
    • ---- new platforms ----------------------------------------
    • CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile
    • CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile
    • SKX-SP B1 6-55-3/97 01000150 Xeon Scalable
    • ICL U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile
    • ---- updated platforms ------------------------------------
    • SKL U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile
    • SKL H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6
    • AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile
    • KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile
    • CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile
    • WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile
    • AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
    • CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
    • WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile
    • KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8
    • KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3 v6
    • CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop, Mobile, Xeon E
    • CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8
    • CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile
  • Includes security fixes for:
    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2504-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2509-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Updated to 20191112 security release (bsc#1155988)
    • Processor Identifier Version Products
    • Model Stepping F-MO-S/PI Old->New
    • ---- new platforms ----------------------------------------
    • CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile
    • CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile
    • SKX-SP B1 6-55-3/97 01000150 Xeon Scalable
    • ICL U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile
    • ---- updated platforms ------------------------------------
    • SKL U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile
    • SKL H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6
    • AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile
    • KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile
    • CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile
    • WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile
    • AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
    • CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
    • WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile
    • KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8
    • KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3 v6
    • CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop, Mobile, Xeon E
    • CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8
    • CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile
  • Includes security fixes for:
    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Record
openSUSE-SU-2019:2509-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2527-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Updated to 20191112 official security release (bsc#1155988)
  • Includes security fixes for:
    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2527-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2528-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Updated to 20191112 official security release (bsc#1155988)
  • Includes security fixes for:
    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Record
openSUSE-SU-2019:2528-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11478-1 No score

ucode-intel-20210608-1.2 on GA media

These are all security issues fixed in the ucode-intel-20210608-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11478-1
Updated
2026-11-02
OSVSUSE-SU-2019:14217-1 No score

Security update for microcode_ctl

This update for microcode_ctl fixes the following issues:

  • Updated to 20191112 security release (bsc#1155988)
    • Processor Identifier Version Products
    • Model Stepping F-MO-S/PI Old->New
    • ---- new platforms ----------------------------------------
    • CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile
    • CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile
    • SKX-SP B1 6-55-3/97 01000150 Xeon Scalable
    • ICL U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile
    • ---- updated platforms ------------------------------------
    • SKL U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile
    • SKL H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6
    • AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile
    • KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile
    • CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile
    • WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile
    • AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
    • CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
    • WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile
    • KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8
    • KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3 v6
    • CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop, Mobile, Xeon E
    • CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8
    • CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile
  • Includes security fixes for:
    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)
Record
SUSE-SU-2019:14217-1
Updated
2026-11-02
OSVSUSE-SU-2019:14220-1 No score

Security update for microcode_ctl

This update for microcode_ctl fixes the following issues:

  • Updated to 20191112 official security release (bsc#1155988)
  • Includes security fixes for:
    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)
Record
SUSE-SU-2019:14220-1
Updated
2026-11-02
OSVSUSE-SU-2019:2957-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Updated to 20191112 security release (bsc#1155988)
    • Processor Identifier Version Products
    • Model Stepping F-MO-S/PI Old->New
    • ---- new platforms ----------------------------------------
    • CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile
    • CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile
    • SKX-SP B1 6-55-3/97 01000150 Xeon Scalable
    • ICL U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile
    • ---- updated platforms ------------------------------------
    • SKL U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile
    • SKL H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6
    • AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile
    • KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile
    • CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile
    • WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile
    • AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
    • CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
    • WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile
    • KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8
    • KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3 v6
    • CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop, Mobile, Xeon E
    • CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8
    • CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile
  • Includes security fixes for:
    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)
Record
SUSE-SU-2019:2957-1
Updated
2026-11-02
OSVSUSE-SU-2019:2958-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Updated to 20191112 security release (bsc#1155988)
    • Processor Identifier Version Products
    • Model Stepping F-MO-S/PI Old->New
    • ---- new platforms ----------------------------------------
    • CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile
    • CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile
    • SKX-SP B1 6-55-3/97 01000150 Xeon Scalable
    • ICL U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile
    • ---- updated platforms ------------------------------------
    • SKL U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile
    • SKL H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6
    • AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile
    • KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile
    • CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile
    • WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile
    • AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
    • CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
    • WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile
    • KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8
    • KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3 v6
    • CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop, Mobile, Xeon E
    • CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8
    • CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile
  • Includes security fixes for:
    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)
Record
SUSE-SU-2019:2958-1
Updated
2026-11-02
OSVSUSE-SU-2019:2959-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Updated to 20191112 security release (bsc#1155988)

    • Processor Identifier Version Products
    • Model Stepping F-MO-S/PI Old->New
    • ---- new platforms ----------------------------------------
    • CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile
    • CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile
    • SKX-SP B1 6-55-3/97 01000150 Xeon Scalable
    • ICL U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile
    • ---- updated platforms ------------------------------------
    • SKL U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile
    • SKL H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6
    • AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile
    • KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile
    • CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile
    • WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile
    • AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
    • CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
    • WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile
    • KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8
    • KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3 v6
    • CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop, Mobile, Xeon E
    • CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8
    • CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile

  • Includes security fixes for:

    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)

  • requires coreutils for the %post script (bsc#1154043)

Record
SUSE-SU-2019:2959-1
Updated
2026-11-02
OSVSUSE-SU-2019:2986-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Updated to 20191112 official security release (bsc#1155988)
  • Includes security fixes for:
    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)
Record
SUSE-SU-2019:2986-1
Updated
2026-11-02
OSVSUSE-SU-2019:2987-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Updated to 20191112 official security release (bsc#1155988)
  • Includes security fixes for:
    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)
Record
SUSE-SU-2019:2987-1
Updated
2026-11-02
OSVSUSE-SU-2019:2988-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Updated to 20191112 official security release (bsc#1155988)
  • Includes security fixes for:
    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)
Record
SUSE-SU-2019:2988-1
Updated
2026-11-02
OSVSUSE-SU-2019:3091-1 No score

Security update for ucode-intel

This update for ucode-intel to version fixes the following issues:

  • Updated to 20191115 official security release (bsc#1157004 and bsc#1155988)
  • Includes security fixes for:
    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)
Record
SUSE-SU-2019:3091-1
Updated
2026-11-02
OSVUSN-4182-1 No score

intel-microcode update

Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions (TSX) could expose memory contents previously stored in microarchitectural buffers to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2019-11135)

It was discovered that certain Intel Xeon processors did not properly restrict access to a voltage modulation interface. A local privileged attacker could use this to cause a denial of service (system crash). (CVE-2019-11139)

Record
USN-4182-1
Updated
2026-11-02
OSVUSN-4182-2 No score

intel-microcode update

USN-4182-2 provided updates for Intel Microcode. This update provides the corresponding update for Ubuntu 14.04 ESM.

Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions (TSX) could expose memory contents previously stored in microarchitectural buffers to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2019-11135)

It was discovered that certain Intel Xeon processors did not properly restrict access to a voltage modulation interface. A local privileged attacker could use this to cause a denial of service (system crash). (CVE-2019-11139)

Record
USN-4182-2
Updated
2026-11-02

Affected products

Show 47 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
intel-microcode
Debian:12
 before 3.20191112.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20191112.1
intel-microcode
Debian:13
 before 3.20191112.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20191112.1
intel-microcode
Debian:14
 before 3.20191112.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20191112.1
intel-microcode
Debian:8
From an advisory covering 2 CVEs
 before 3.20191115.2~deb8u1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20191115.2~deb8u1
intel-microcode
Debian:9
From an advisory covering 2 CVEs
 before 3.20191112.1~deb9u1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20191112.1~deb9u1
intel-microcode
Debian:10
From an advisory covering 2 CVEs
 before 3.20191112.1~deb10u1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20191112.1~deb10u1
microcode
Mageia:7
From an advisory covering 4 CVEs
 before 0.20191112-1.mga7.nonfree
0.20191112-1.mga7.nonfree
microcode
Mageia:7
From an advisory covering 4 CVEs
 before 0.20191115-1.mga7.nonfree
0.20191115-1.mga7.nonfree
microcode_ctl
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 4:20190618-1.20191112.1.el8_1
4:20190618-1.20191112.1.el8_1
microcode_ctl
Red Hat:rhel_e4s:8.0::baseos
From an advisory covering 2 CVEs
 before 4:20180807a-2.20191112.1.el8_0
4:20180807a-2.20191112.1.el8_0
Show 55 moreShow less
Affected packages
PackageAffectedFixed
microcode_ctl
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 2 CVEs
 before 1.17-102.83.47.1
1.17-102.83.47.1
microcode_ctl
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.17-102.83.47.1
1.17-102.83.47.1
microcode_ctl
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 2 CVEs
 before 1.17-102.83.50.1
1.17-102.83.50.1
microcode_ctl
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.17-102.83.50.1
1.17-102.83.50.1
ucode-intel
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 2 CVEs
 before 20191112-3.28.1
20191112-3.28.1
ucode-intel
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 2 CVEs
 before 20191112-3.9.1
20191112-3.9.1
ucode-intel
SUSE:HPE Helion OpenStack 8
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:OpenStack Cloud 7
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:OpenStack Cloud 8
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Enterprise Storage 5
From an advisory covering 2 CVEs
 before 20191112-13.53.1
20191112-13.53.1
ucode-intel
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 2 CVEs
 before 20191112a-3.31.1
20191112a-3.31.1
ucode-intel
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 2 CVEs
 before 20191112a-3.13.2
20191112a-3.13.2
ucode-intel
SUSE:HPE Helion OpenStack 8
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:OpenStack Cloud 7
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:OpenStack Cloud 8
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:Enterprise Storage 5
From an advisory covering 2 CVEs
 before 20191112a-13.56.1
20191112a-13.56.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 20191115-3.3.1
20191115-3.3.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 20191115-3.3.1
20191115-3.3.1
intel-microcode
Ubuntu:Pro:14.04:LTS
 before 3.20191112-0ubuntu0.14.04.2, plus listed versions
1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2
Show 9 moreShow less
3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.1
3.20191112-0ubuntu0.14.04.2
intel-microcode
Ubuntu:16.04:LTS
 before 3.20191112-0ubuntu0.16.04.2, plus listed versions
3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1
Show 7 moreShow less
3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.1
3.20191112-0ubuntu0.16.04.2
intel-microcode
Ubuntu:18.04:LTS
 before 3.20191112-0ubuntu0.18.04.2, plus listed versions
3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1
Show 6 moreShow less
3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.1
3.20191112-0ubuntu0.18.04.2
intel-microcode
Ubuntu:16.04:LTS
From an advisory covering 2 CVEs
 before 3.20191112-0ubuntu0.16.04.2, plus listed versions
3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1
Show 7 moreShow less
3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.1
3.20191112-0ubuntu0.16.04.2
intel-microcode
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 3.20191112-0ubuntu0.18.04.2, plus listed versions
3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1
Show 6 moreShow less
3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.1
3.20191112-0ubuntu0.18.04.2
intel-microcode
Ubuntu:Pro:14.04:LTS
From an advisory covering 2 CVEs
 before 3.20191112-0ubuntu0.14.04.2, plus listed versions
1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2
Show 9 moreShow less
3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.1
3.20191112-0ubuntu0.14.04.2
ucode-intel
openSUSE:Leap 15.0
From an advisory covering 2 CVEs
 before 20191112-lp150.2.30.1
20191112-lp150.2.30.1
ucode-intel
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
 before 20191112-lp151.2.9.1
20191112-lp151.2.9.1
ucode-intel
openSUSE:Leap 15.0
From an advisory covering 2 CVEs
 before 20191112a-lp150.2.33.1
20191112a-lp150.2.33.1
ucode-intel
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
 before 20191112a-lp151.2.12.1
20191112a-lp151.2.12.1
ucode-intel
openSUSE:Tumbleweed
From an advisory covering 15 CVEs
 before 20210608-1.2
20210608-1.2

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-11139 is a medium vulnerability (CVSS 6.0) in Debian Linux, published November 12, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in intel-microcode 3.20191112.1.

References

Show 73 moreShow less
This page doesn't list everything

Left out here: 434 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open