Every CVE Search/ Get API key

CVE-2020-8695

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged...

5.5 MediumFix available

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.42%Down 1.0 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.5

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

Record
CVE-2020-8695
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-203
Updated
2026-11-02
CVE List No score

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

Record
CVE-2020-8695
Updated
2026-11-02
EUVDEUVD-2020-29543 No score

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

Record
EUVD-2020-29543
Updated
2026-11-03
GitHub AdvisoriesGHSA-55fx-92rr-h42r No score

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged...

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

Record
GHSA-55fx-92rr-h42r
Updated
2026-11-02
OSVBELL-CVE-2020-8695 5.5

CVE-2020-8695 does not affect BellSoft software

Record
BELL-CVE-2020-8695
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSV 5.5

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

Record
CVE-2020-8695
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 47 moreShow less
OSVDEBIAN-CVE-2020-8695 5.5

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

Record
DEBIAN-CVE-2020-8695
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:5083 5.5

Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update

Record
RHSA-2020:5083
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:5085 5.5

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2020:5085
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:5181 5.5

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2020:5181
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:5182 5.5

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2020:5182
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:5183 5.5

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2020:5183
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:5185 5.5

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2020:5185
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:5186 5.5

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2020:5186
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:5188 5.5

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2020:5188
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:5190 5.5

Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update

Record
RHSA-2020:5190
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:5369 5.5

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2020:5369
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2021:3027 8.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3027
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3028 8.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3028
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3029 8.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3029
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3176 8.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3176
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3255 8.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3255
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3317 8.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3317
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3322 8.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3322
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3323 8.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3323
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3364 8.8

Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Record
RHSA-2021:3364
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2021:3027 8.8

Important: microcode_ctl security, bug fix and enhancement update

The microcode_ctl packages provide microcode updates for Intel.

Security Fix(es):

  • hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

  • hw: Vector Register Data Sampling (CVE-2020-0548)

  • hw: L1D Cache Eviction Sampling (CVE-2020-0549)

  • hw: vt-d related privilege escalation (CVE-2020-24489)

  • hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

  • hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

  • hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  • hw: Vector Register Leakage-Active (CVE-2020-8696)

  • hw: Fast forward store predictor (CVE-2020-8698)

Record
RLSA-2021:3027
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-8695 5.5

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

Record
UBUNTU-CVE-2020-8695
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVMGASA-2020-0422 No score

Updated microcode package fixes security vulnerabilities

Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8694)

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. (CVE-2020-8695)

Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8698)

Record
MGASA-2020-0422
Updated
2026-11-02
OSVopenSUSE-SU-2020:2075-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Record
openSUSE-SU-2020:2075-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:2098-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Record
openSUSE-SU-2020:2098-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11478-1 No score

ucode-intel-20210608-1.2 on GA media

These are all security issues fixed in the ucode-intel-20210608-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11478-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13469-1 No score

docker-24.0.7_ce-2.1 on GA media

These are all security issues fixed in the docker-24.0.7_ce-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13469-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15589-1 No score

docker-stable-24.0.9_ce-15.1 on GA media

These are all security issues fixed in the docker-stable-24.0.9_ce-15.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15589-1
Updated
2026-11-02
OSVSUSE-SU-2020:14540-1 No score

Security update for microcode_ctl

This update for microcode_ctl fixes the following issue:

  • Updated Intel CPU Microcode to 20201027 prerelease (bsc#1170446)

  • CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)

  • CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)

    New Platforms:

    | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile

    Updated Platforms:

    | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile

Record
SUSE-SU-2020:14540-1
Updated
2026-11-02
OSVSUSE-SU-2020:14546-1 No score

Security update for microcode_ctl

This update for microcode_ctl fixes the following issues:

Record
SUSE-SU-2020:14546-1
Updated
2026-11-02
OSVSUSE-SU-2020:3271-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode updated to 20201027 pre-release

  • CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)

  • CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)

    New Platforms:

    | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile

    Updated Platforms:

    | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile

Record
SUSE-SU-2020:3271-1
Updated
2026-11-02
OSVSUSE-SU-2020:3274-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode updated to 20201027 prerelease
  • CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
  • CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)

New Platforms:

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile

Updated Platforms:

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile

Record
SUSE-SU-2020:3274-1
Updated
2026-11-02
OSVSUSE-SU-2020:3275-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode updated to 20201027 prerelease

  • CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)

  • CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)

    New Platforms:

    | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile

    Updated Platforms:

    | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile

Record
SUSE-SU-2020:3275-1
Updated
2026-11-02
OSVSUSE-SU-2020:3276-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode updated to 20201027 prerelease
  • CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
  • CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)

New Platforms:

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile

Updated Platforms:

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile

Record
SUSE-SU-2020:3276-1
Updated
2026-11-02
OSVSUSE-SU-2020:3279-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode updated to 20201027 prerelease
  • CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
  • CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)

New Platforms:

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile

Updated Platforms:

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile

Record
SUSE-SU-2020:3279-1
Updated
2026-11-02
OSVSUSE-SU-2020:3372-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Record
SUSE-SU-2020:3372-1
Updated
2026-11-02
OSVSUSE-SU-2020:3373-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Record
SUSE-SU-2020:3373-1
Updated
2026-11-02
OSVSUSE-SU-2020:3374-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Record
SUSE-SU-2020:3374-1
Updated
2026-11-02
OSVSUSE-SU-2020:3457-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Record
SUSE-SU-2020:3457-1
Updated
2026-11-02
OSVSUSE-SU-2020:3514-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

Record
SUSE-SU-2020:3514-1
Updated
2026-11-02
OSVSUSE-SU-2020:3713-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).
  • CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).
  • CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178123).
  • CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).
  • CVE-2020-25704: Fixed a leak in perf_event_parse_addr_filter() (bsc#1178393).
  • CVE-2020-27777: Restrict RTAS requests from userspace (bsc#1179107)
  • CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886).
  • CVE-2020-28941: Fixed an issue where local attackers on systems with the speakup driver could cause a local denial of service attack (bsc#1178740).
  • CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589).
  • CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429).
  • CVE-2020-4788: Fixed an issue with IBM Power9 processors could have allowed a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances (bsc#1177666).
  • CVE-2020-8694, CVE-2020-8695: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1170415 bsc#1170446)
  • CVE-2020-28368: Fixed Intel RAPL sidechannel attack aka PLATYPUS attack (XSA-351 bsc#1178591).
  • CVE-2020-29369: Fixed a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe (bnc#1173504 bsc#1179432).

The following non-security bugs were fixed:

  • 9P: Cast to loff_t before multiplying (git-fixes).
  • ACPI: button: Add DMI quirk for Medion Akoya E2228T (git-fixes).
  • ACPICA: Add NHLT table signature (bsc#1176200).
  • ACPI: dock: fix enum-conversion warning (git-fixes).
  • ACPI / extlog: Check for RDMSR failure (git-fixes).
  • ACPI: GED: fix -Wformat (git-fixes).
  • ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
  • ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
  • Add bug reference to two hv_netvsc patches (bsc#1178853).
  • ALSA: ctl: fix error path at adding user-defined element set (git-fixes).
  • ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes).
  • ALSA: fix kernel-doc markups (git-fixes).
  • ALSA: hda: fix jack detection with Realtek codecs when in D3 (git-fixes).
  • ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).
  • ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) (git-fixes).
  • ALSA: hda/realtek - Add supported for Lenovo ThinkPad Headset Button (git-fixes).
  • ALSA: hda/realtek - Add supported mute Led for HP (git-fixes).
  • ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
  • ALSA: hda/realtek - Fixed HP headset Mic can't be detected (git-fixes).
  • ALSA: hda/realtek - HP Headset Mic can't detect after boot (git-fixes).
  • ALSA: hda: Reinstate runtime_allow() for all hda controllers (git-fixes).
  • ALSA: mixart: Fix mutex deadlock (git-fixes).
  • ALSA: usb-audio: Add delay quirk for all Logitech USB devices (git-fixes).
  • ALSA: usb-audio: Add implicit feedback quirk for MODX (git-fixes).
  • ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (git-fixes).
  • ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 (git-fixes).
  • ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices (git-fixes).
  • arm64: bpf: Fix branch offset in JIT (git-fixes).
  • arm64: dts:…
Record
SUSE-SU-2020:3713-1
Updated
2026-11-02
OSVSUSE-SU-2023:4625-1 No score

Security update for containerd, docker, runc

This update for containerd, docker, runc fixes the following issues:

containerd:

-Update to containerd v1.7.8. Upstream release notes:

https://github.com/containerd/containerd/releases/tag/v1.7.8

docker:

  • Update to Docker 24.0.7-ce. See upstream changelong online at https://docs.docker.com/engine/release-notes/24.0/#2407 (bsc#1217513)
    • Deny containers access to /sys/devices/virtual/powercap by default.
      • CVE-2020-8694 bsc#1170415
      • CVE-2020-8695 bsc#1170446
      • CVE-2020-12912 bsc#1178760

runc:

Record
SUSE-SU-2023:4625-1
Updated
2026-11-02
OSVSUSE-SU-2023:4936-1 No score

Security update for docker, rootlesskit

This update for docker, rootlesskit fixes the following issues:

docker:

This update ships docker-rootless support in the docker-rootless-extra package. (jsc#PED-6180)

rootlesskit:

  • new package, for docker rootless support. (jsc#PED-6180)
Record
SUSE-SU-2023:4936-1
Updated
2026-11-02
OSVSUSE-SU-2025:03540-1 No score

Security update for docker-stable

This update for docker-stable fixes the following issues:

  • Include historical changelog data from before the docker-stable fork. The initial changelog entry did technically provide all the necessary information, but our CVE tracking tools do not understand how the package is forked and so it seems that this package does not include fixes for ~12 years of updates. So, include a copy of the original package's changelog up until the fork point. (bsc#1250596)

  • Remove git-core recommends on SLE. Most SLE systems have installRecommends=yes by default and thus end up installing git with Docker. bsc#1250508

    This feature is mostly intended for developers ('docker build git://') so most users already have the dependency installed, and the error when git is missing is fairly straightforward (so they can easily figure out what they need to install).

  • Backport https://github.com/moby/moby/pull/48517. bsc#1247362

  • Update to docker-buildx v0.25.0. Upstream changelog: https://github.com/docker/buildx/releases/tag/v0.25.0

  • Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as Docker does not have permission to access the host zypper credentials in this mode (and unprivileged users cannot disable the feature using /etc/docker/suse-secrets-enable.) bsc#1240150

  • Initial docker-stable fork, forked from Docker 24.0.7-ce release (packaged on 2024-02-14). The original changelog is included below for historical reference.

Record
SUSE-SU-2025:03540-1
Updated
2026-11-02
OSVSUSE-SU-2025:03545-1 No score

Security update for docker-stable

This update for docker-stable fixes the following issues:

Note this update contains a already fixed references mostly.

  • Remove git-core recommends on SLE to avoid pulling it in unnecessary. (bsc#1250508)

    This feature is mostly intended for developers ('docker build git://') so most users already have the dependency installed, and the error when git is missing is fairly straightforward (so they can easily figure out what they need to install).

  • Include historical changelog data from before the docker-stable fork. The initial changelog entry did technically provide all the necessary information, but our CVE tracking tools do not understand how the package is forked and so it seems that this package does not include fixes for ~12 years of updates. So, include a copy of the original package's changelog up until the fork point. bsc#1250596

  • Update to docker-buildx v0.25.0. Upstream changelog: https://github.com/docker/buildx/releases/tag/v0.25.0

  • Update to Go 1.23 for building now that upstream has switched their 23.0.x LTSS to use Go 1.23.

  • Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as Docker does not have permission to access the host zypper credentials in this mode (and unprivileged users cannot disable the feature using /etc/docker/suse-secrets-enable.) bsc#1240150

  • Initial docker-stable fork, forked from Docker 24.0.7-ce release (packaged on 2024-02-14). The original changelog is included below for historical reference.

Record
SUSE-SU-2025:03545-1
Updated
2026-11-02
OSVUSN-4628-1 No score

intel-microcode vulnerabilities

Moritz Lipp, Michael Schwarz, Andreas Kogler, David Oswald, Catherine Easdon, Claudio Canella, and Daniel Gruss discovered that the Intel Running Average Power Limit (RAPL) feature of some Intel processors allowed a side- channel attack based on power consumption measurements. A local attacker could possibly use this to expose sensitive information. (CVE-2020-8695)

Ezra Caltum, Joseph Nuzman, Nir Shildan and Ofir Joseff discovered that some Intel(R) Processors did not properly remove sensitive information before storage or transfer in some situations. A local attacker could possibly use this to expose sensitive information. (CVE-2020-8696)

Ezra Caltum, Joseph Nuzman, Nir Shildan and Ofir Joseff discovered that some Intel(R) Processors did not properly isolate shared resources in some situations. A local attacker could possibly use this to expose sensitive information. (CVE-2020-8698)

Record
USN-4628-1
Updated
2026-11-02
OSVUSN-4628-3 No score

intel-microcode vulnerabilities

USN-4628-1 provided updated Intel Processor Microcode for various processor types. This update provides the corresponding updates for some additional processor types.

Original advisory details:

Moritz Lipp, Michael Schwarz, Andreas Kogler, David Oswald, Catherine Easdon, Claudio Canella, and Daniel Gruss discovered that the Intel Running Average Power Limit (RAPL) feature of some Intel processors allowed a side- channel attack based on power consumption measurements. A local attacker could possibly use this to expose sensitive information. (CVE-2020-8695)

Ezra Caltum, Joseph Nuzman, Nir Shildan and Ofir Joseff discovered that some Intel(R) Processors did not properly remove sensitive information before storage or transfer in some situations. A local attacker could possibly use this to expose sensitive information. (CVE-2020-8696)

Ezra Caltum, Joseph Nuzman, Nir Shildan and Ofir Joseff discovered that some Intel(R) Processors did not properly isolate shared resources in some situations. A local attacker could possibly use this to expose sensitive information. (CVE-2020-8698)

Record
USN-4628-3
Updated
2026-11-02

Affected products

Show 289 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
intel-microcode
Debian:12
 before 3.20201110.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20201110.1
intel-microcode
Debian:13
 before 3.20201110.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20201110.1
intel-microcode
Debian:14
 before 3.20201110.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20201110.1
intel-microcode
Debian:9
From an advisory covering 3 CVEs
 before 3.20201118.1~deb9u1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20201118.1~deb9u1
microcode
Mageia:7
From an advisory covering 4 CVEs
 before 0.20201110-1.mga7.nonfree
0.20201110-1.mga7.nonfree
microcode_ctl
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 2:2.1-73.2.el7_9
2:2.1-73.2.el7_9
microcode_ctl-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 2:2.1-73.2.el7_9
2:2.1-73.2.el7_9
microcode_ctl
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 2:2.1-73.2.el7_9
2:2.1-73.2.el7_9
microcode_ctl-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 2:2.1-73.2.el7_9
2:2.1-73.2.el7_9
microcode_ctl
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 2:2.1-73.2.el7_9
2:2.1-73.2.el7_9
Show 169 moreShow less
Affected packages
PackageAffectedFixed
microcode_ctl-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 2:2.1-73.2.el7_9
2:2.1-73.2.el7_9
microcode_ctl
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 4:20200609-2.20201027.1.el8_3
4:20200609-2.20201027.1.el8_3
microcode_ctl
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 3 CVEs
 before 2:2.1-47.18.el7_6
2:2.1-47.18.el7_6
microcode_ctl-debuginfo
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 3 CVEs
 before 2:2.1-47.18.el7_6
2:2.1-47.18.el7_6
microcode_ctl
Red Hat:rhel_eus:7.6::server
From an advisory covering 3 CVEs
 before 2:2.1-47.18.el7_6
2:2.1-47.18.el7_6
microcode_ctl-debuginfo
Red Hat:rhel_eus:7.6::server
From an advisory covering 3 CVEs
 before 2:2.1-47.18.el7_6
2:2.1-47.18.el7_6
microcode_ctl
Red Hat:rhel_aus:7.4::server
From an advisory covering 3 CVEs
 before 2:2.1-22.36.el7_4
2:2.1-22.36.el7_4
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.4::server
From an advisory covering 3 CVEs
 before 2:2.1-22.36.el7_4
2:2.1-22.36.el7_4
microcode_ctl
Red Hat:rhel_e4s:7.4::server
From an advisory covering 3 CVEs
 before 2:2.1-22.36.el7_4
2:2.1-22.36.el7_4
microcode_ctl-debuginfo
Red Hat:rhel_e4s:7.4::server
From an advisory covering 3 CVEs
 before 2:2.1-22.36.el7_4
2:2.1-22.36.el7_4
microcode_ctl
Red Hat:rhel_tus:7.4::server
From an advisory covering 3 CVEs
 before 2:2.1-22.36.el7_4
2:2.1-22.36.el7_4
microcode_ctl-debuginfo
Red Hat:rhel_tus:7.4::server
From an advisory covering 3 CVEs
 before 2:2.1-22.36.el7_4
2:2.1-22.36.el7_4
microcode_ctl
Red Hat:rhel_aus:7.3::server
From an advisory covering 3 CVEs
 before 2:2.1-16.37.el7_3
2:2.1-16.37.el7_3
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.3::server
From an advisory covering 3 CVEs
 before 2:2.1-16.37.el7_3
2:2.1-16.37.el7_3
microcode_ctl
Red Hat:rhel_e4s:7.3::server
From an advisory covering 3 CVEs
 before 2:2.1-16.37.el7_3
2:2.1-16.37.el7_3
microcode_ctl-debuginfo
Red Hat:rhel_e4s:7.3::server
From an advisory covering 3 CVEs
 before 2:2.1-16.37.el7_3
2:2.1-16.37.el7_3
microcode_ctl
Red Hat:rhel_tus:7.3::server
From an advisory covering 3 CVEs
 before 2:2.1-16.37.el7_3
2:2.1-16.37.el7_3
microcode_ctl-debuginfo
Red Hat:rhel_tus:7.3::server
From an advisory covering 3 CVEs
 before 2:2.1-16.37.el7_3
2:2.1-16.37.el7_3
microcode_ctl
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 3 CVEs
 before 4:20191115-4.20201112.1.el8_2
4:20191115-4.20201112.1.el8_2
microcode_ctl
Red Hat:rhel_e4s:8.0::baseos
From an advisory covering 3 CVEs
 before 4:20180807a-2.20201112.1.el8_0
4:20180807a-2.20201112.1.el8_0
microcode_ctl
Red Hat:rhel_aus:7.2::server
From an advisory covering 3 CVEs
 before 2:2.1-12.34.el7_2
2:2.1-12.34.el7_2
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.2::server
From an advisory covering 3 CVEs
 before 2:2.1-12.34.el7_2
2:2.1-12.34.el7_2
microcode_ctl
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 3 CVEs
 before 2:2.1-53.13.el7_7
2:2.1-53.13.el7_7
microcode_ctl-debuginfo
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 3 CVEs
 before 2:2.1-53.13.el7_7
2:2.1-53.13.el7_7
microcode_ctl
Red Hat:rhel_eus:7.7::server
From an advisory covering 3 CVEs
 before 2:2.1-53.13.el7_7
2:2.1-53.13.el7_7
microcode_ctl-debuginfo
Red Hat:rhel_eus:7.7::server
From an advisory covering 3 CVEs
 before 2:2.1-53.13.el7_7
2:2.1-53.13.el7_7
microcode_ctl
Red Hat:rhel_eus:8.1::baseos
From an advisory covering 3 CVEs
 before 4:20190618-1.20201112.1.el8_1
4:20190618-1.20201112.1.el8_1
microcode_ctl
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 4:20210216-1.20210608.1.el8_4
4:20210216-1.20210608.1.el8_4
microcode_ctl
Red Hat:enterprise_linux:7::client
From an advisory covering 9 CVEs
 before 2:2.1-73.11.el7_9
2:2.1-73.11.el7_9
microcode_ctl-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 9 CVEs
 before 2:2.1-73.11.el7_9
2:2.1-73.11.el7_9
microcode_ctl
Red Hat:enterprise_linux:7::server
From an advisory covering 9 CVEs
 before 2:2.1-73.11.el7_9
2:2.1-73.11.el7_9
microcode_ctl-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 9 CVEs
 before 2:2.1-73.11.el7_9
2:2.1-73.11.el7_9
microcode_ctl
Red Hat:enterprise_linux:7::workstation
From an advisory covering 9 CVEs
 before 2:2.1-73.11.el7_9
2:2.1-73.11.el7_9
microcode_ctl-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 9 CVEs
 before 2:2.1-73.11.el7_9
2:2.1-73.11.el7_9
microcode_ctl
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 9 CVEs
 before 2:2.1-53.18.el7_7
2:2.1-53.18.el7_7
microcode_ctl-debuginfo
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 9 CVEs
 before 2:2.1-53.18.el7_7
2:2.1-53.18.el7_7
microcode_ctl
Red Hat:rhel_eus:7.7::server
From an advisory covering 9 CVEs
 before 2:2.1-53.18.el7_7
2:2.1-53.18.el7_7
microcode_ctl-debuginfo
Red Hat:rhel_eus:7.7::server
From an advisory covering 9 CVEs
 before 2:2.1-53.18.el7_7
2:2.1-53.18.el7_7
microcode_ctl
Red Hat:rhel_eus:8.1::baseos
From an advisory covering 9 CVEs
 before 4:20190618-1.20210608.1.el8_1
4:20190618-1.20210608.1.el8_1
microcode_ctl
Red Hat:rhel_aus:7.4::server
From an advisory covering 9 CVEs
 before 2:2.1-22.41.el7_4
2:2.1-22.41.el7_4
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.4::server
From an advisory covering 9 CVEs
 before 2:2.1-22.41.el7_4
2:2.1-22.41.el7_4
microcode_ctl
Red Hat:rhel_e4s:7.4::server
From an advisory covering 9 CVEs
 before 2:2.1-22.41.el7_4
2:2.1-22.41.el7_4
microcode_ctl-debuginfo
Red Hat:rhel_e4s:7.4::server
From an advisory covering 9 CVEs
 before 2:2.1-22.41.el7_4
2:2.1-22.41.el7_4
microcode_ctl
Red Hat:rhel_tus:7.4::server
From an advisory covering 9 CVEs
 before 2:2.1-22.41.el7_4
2:2.1-22.41.el7_4
microcode_ctl-debuginfo
Red Hat:rhel_tus:7.4::server
From an advisory covering 9 CVEs
 before 2:2.1-22.41.el7_4
2:2.1-22.41.el7_4
microcode_ctl
Red Hat:rhel_aus:7.6::server
From an advisory covering 9 CVEs
 before 2:2.1-47.23.el7_6
2:2.1-47.23.el7_6
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.6::server
From an advisory covering 9 CVEs
 before 2:2.1-47.23.el7_6
2:2.1-47.23.el7_6
microcode_ctl
Red Hat:rhel_e4s:7.6::server
From an advisory covering 9 CVEs
 before 2:2.1-47.23.el7_6
2:2.1-47.23.el7_6
microcode_ctl-debuginfo
Red Hat:rhel_e4s:7.6::server
From an advisory covering 9 CVEs
 before 2:2.1-47.23.el7_6
2:2.1-47.23.el7_6
microcode_ctl
Red Hat:rhel_tus:7.6::server
From an advisory covering 9 CVEs
 before 2:2.1-47.23.el7_6
2:2.1-47.23.el7_6
microcode_ctl-debuginfo
Red Hat:rhel_tus:7.6::server
From an advisory covering 9 CVEs
 before 2:2.1-47.23.el7_6
2:2.1-47.23.el7_6
microcode_ctl
Red Hat:rhel_aus:7.3::server
From an advisory covering 9 CVEs
 before 2:2.1-16.42.el7_3
2:2.1-16.42.el7_3
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.3::server
From an advisory covering 9 CVEs
 before 2:2.1-16.42.el7_3
2:2.1-16.42.el7_3
microcode_ctl
Red Hat:rhel_aus:7.2::server
From an advisory covering 9 CVEs
 before 2:2.1-12.39.el7_2
2:2.1-12.39.el7_2
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.2::server
From an advisory covering 9 CVEs
 before 2:2.1-12.39.el7_2
2:2.1-12.39.el7_2
microcode_ctl
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 9 CVEs
 before 4:20191115-4.20210608.1.el8_2
4:20191115-4.20210608.1.el8_2
microcode_ctl
Rocky Linux:8
From an advisory covering 9 CVEs
 before 4:20210216-1.20210608.1.el8_4
4:20210216-1.20210608.1.el8_4
microcode_ctl
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 2 CVEs
 before 1.17-102.83.59.1
1.17-102.83.59.1
microcode_ctl
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.17-102.83.59.1
1.17-102.83.59.1
microcode_ctl
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 3 CVEs
 before 1.17-102.83.62.1
1.17-102.83.62.1
microcode_ctl
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 3 CVEs
 before 1.17-102.83.62.1
1.17-102.83.62.1
ucode-intel
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 2 CVEs
 before 20201027-2.7.1
20201027-2.7.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 20201027-3.20.1
20201027-3.20.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 20201027-3.20.1
20201027-3.20.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 2 CVEs
 before 20201027-3.51.1
20201027-3.51.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 2 CVEs
 before 20201027-3.51.1
20201027-3.51.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 2 CVEs
 before 20201027-3.51.1
20201027-3.51.1
ucode-intel
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 2 CVEs
 before 20201027-3.33.1
20201027-3.33.1
ucode-intel
SUSE:HPE Helion OpenStack 8
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:OpenStack Cloud 7
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:OpenStack Cloud 8
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:OpenStack Cloud 9
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:Enterprise Storage 5
From an advisory covering 2 CVEs
 before 20201027-13.76.1
20201027-13.76.1
ucode-intel
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 3 CVEs
 before 20201110-3.39.1
20201110-3.39.1
ucode-intel
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 3 CVEs
 before 20201110-2.10.1
20201110-2.10.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 3 CVEs
 before 20201110-3.55.1
20201110-3.55.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 3 CVEs
 before 20201110-3.55.1
20201110-3.55.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 3 CVEs
 before 20201110-3.55.1
20201110-3.55.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 3 CVEs
 before 20201110-3.23.1
20201110-3.23.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 3 CVEs
 before 20201110-3.23.1
20201110-3.23.1
ucode-intel
SUSE:HPE Helion OpenStack 8
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:OpenStack Cloud 7
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:OpenStack Cloud 8
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:OpenStack Cloud 9
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
ucode-intel
SUSE:Enterprise Storage 5
From an advisory covering 3 CVEs
 before 20201118-13.81.1
20201118-13.81.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-18.29.1
5.3.18-18.29.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-18.29.1
5.3.18-18.29.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-18.29.1
5.3.18-18.29.1
containerd
SUSE:Linux Enterprise Module for Containers 12
From an advisory covering 3 CVEs
 before 1.7.8-16.88.1
1.7.8-16.88.1
docker
SUSE:Linux Enterprise Module for Containers 12
From an advisory covering 3 CVEs
 before 24.0.7_ce-98.103.1
24.0.7_ce-98.103.1
runc
SUSE:Linux Enterprise Module for Containers 12
From an advisory covering 3 CVEs
 before 1.1.10-16.40.1
1.1.10-16.40.1
docker
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise Module for Containers 15 SP4
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
rootlesskit
SUSE:Linux Enterprise Module for Containers 15 SP4
From an advisory covering 3 CVEs
 before 1.1.1-150000.1.3.3
1.1.1-150000.1.3.3
docker
SUSE:Linux Enterprise Module for Containers 15 SP5
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
rootlesskit
SUSE:Linux Enterprise Module for Containers 15 SP5
From an advisory covering 3 CVEs
 before 1.1.1-150000.1.3.3
1.1.1-150000.1.3.3
docker
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
openSUSE:Leap Micro 5.3
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
openSUSE:Leap Micro 5.4
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
docker
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
rootlesskit
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 1.1.1-150000.1.3.3
1.1.1-150000.1.3.3
docker
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 24.0.7_ce-150000.190.4
24.0.7_ce-150000.190.4
rootlesskit
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 1.1.1-150000.1.3.3
1.1.1-150000.1.3.3
docker-stable
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 53 CVEs
 before 24.0.9_ce-1.20.1
24.0.9_ce-1.20.1
docker-stable
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 53 CVEs
 before 24.0.9_ce-1.20.1
24.0.9_ce-1.20.1
docker-stable
SUSE:Linux Enterprise Module for Containers 15 SP6
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
SUSE:Enterprise Storage 7.1
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
docker-stable
openSUSE:Leap 15.6
From an advisory covering 53 CVEs
 before 24.0.9_ce-150000.1.25.1
24.0.9_ce-150000.1.25.1
intel-microcode
Ubuntu:Pro:14.04:LTS
 before 3.20201110.0ubuntu0.14.04.1, plus listed versions
1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2
Show 14 moreShow less
3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.13.20191112-0ubuntu0.14.04.23.20191115.1ubuntu0.14.04.13.20191115.1ubuntu0.14.04.23.20200609.0ubuntu0.14.04.03.20200609.0ubuntu0.14.04.1
3.20201110.0ubuntu0.14.04.1
intel-microcode
Ubuntu:16.04:LTS
 before 3.20201110.0ubuntu0.16.04.1, plus listed versions
3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1
Show 12 moreShow less
3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.1
3.20201110.0ubuntu0.16.04.1
intel-microcode
Ubuntu:18.04:LTS
 before 3.20210216.0ubuntu0.18.04.1, plus listed versions
3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1
Show 13 moreShow less
3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.2
3.20210216.0ubuntu0.18.04.1
intel-microcode
Ubuntu:20.04:LTS
 before 3.20210216.0ubuntu0.20.04.1, plus listed versions
3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0
Show 4 moreShow less
3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.2
3.20210216.0ubuntu0.20.04.1
intel-microcode
Ubuntu:Pro:14.04:LTS
From an advisory covering 3 CVEs
 before 3.20201110.0ubuntu0.14.04.1, plus listed versions
1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2
Show 14 moreShow less
3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.13.20191112-0ubuntu0.14.04.23.20191115.1ubuntu0.14.04.13.20191115.1ubuntu0.14.04.23.20200609.0ubuntu0.14.04.03.20200609.0ubuntu0.14.04.1
3.20201110.0ubuntu0.14.04.1
intel-microcode
Ubuntu:16.04:LTS
From an advisory covering 3 CVEs
 before 3.20201110.0ubuntu0.16.04.1, plus listed versions
3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1
Show 12 moreShow less
3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.1
3.20201110.0ubuntu0.16.04.1
intel-microcode
Ubuntu:18.04:LTS
From an advisory covering 3 CVEs
 before 3.20201110.0ubuntu0.18.04.1, plus listed versions
3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1
Show 11 moreShow less
3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.1
3.20201110.0ubuntu0.18.04.1
intel-microcode
Ubuntu:20.04:LTS
From an advisory covering 3 CVEs
 before 3.20201110.0ubuntu0.20.04.1, plus listed versions
3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.03.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.2
3.20201110.0ubuntu0.20.04.1
intel-microcode
Ubuntu:18.04:LTS
From an advisory covering 3 CVEs
 before 3.20210216.0ubuntu0.18.04.1, plus listed versions
3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1
Show 13 moreShow less
3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.2
3.20210216.0ubuntu0.18.04.1
intel-microcode
Ubuntu:20.04:LTS
From an advisory covering 3 CVEs
 before 3.20210216.0ubuntu0.20.04.1, plus listed versions
3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0
Show 4 moreShow less
3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.2
3.20210216.0ubuntu0.20.04.1
ucode-intel
openSUSE:Leap 15.2
From an advisory covering 3 CVEs
 before 20201118-lp152.2.8.1
20201118-lp152.2.8.1
ucode-intel
openSUSE:Leap 15.1
From an advisory covering 3 CVEs
 before 20201118-lp151.2.33.1
20201118-lp151.2.33.1
ucode-intel
openSUSE:Tumbleweed
From an advisory covering 15 CVEs
 before 20210608-1.2
20210608-1.2
docker
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 24.0.7_ce-2.1
24.0.7_ce-2.1
docker-stable
openSUSE:Tumbleweed
From an advisory covering 43 CVEs
 before 24.0.9_ce-15.1
24.0.9_ce-15.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-8695 is a medium vulnerability (CVSS 5.5) in Debian Linux, published November 10, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in intel-microcode 3.20201110.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 374 versions, 300 references and the rest of 9 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open