{"id":"CVE-2023-45733","aliases":["ALPINE-CVE-2023-45733","ALSA-2024:9401","BELL-CVE-2023-45733","DEBIAN-CVE-2023-45733","EUVD-2023-50022","GHSA-fg3p-42cv-c5cm","MGASA-2024-0207","OESA-2024-1730","OESA-2024-1731","OESA-2024-1732","OESA-2024-1753","RHEA-2024:7620","RHSA-2024:9401","RLSA-2024:9401","SUSE-SU-2024:1684-1","SUSE-SU-2024:1771-1","SUSE-SU-2025:1032-1","SUSE-SU-2025:20020-1","UBUNTU-CVE-2023-45733","USN-6797-1","openSUSE-SU-2024:13974-1"],"status":"published","title":"Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated...","description":"Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.","severity":{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00179,"percentile":0.07467,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1298"],"published":"2024-05-16T20:47:09Z","modified":"2026-10-29T11:30:09Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"intel-ucode","fixed_in":["20240813-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"intel-ucode","fixed_in":["20240813-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"intel-ucode","fixed_in":["20240514-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"intel-ucode","fixed_in":["20240514-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"intel-ucode","fixed_in":["20240514-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"intel-ucode","fixed_in":["20240514-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"intel-ucode","fixed_in":["20240514-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"intel-ucode","fixed_in":["20240514-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"intel-ucode","fixed_in":["20240813-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"intel-ucode","fixed_in":["20240514-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"intel-microcode","fixed_in":["3.20240514.1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"intel-microcode","fixed_in":["3.20240514.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"intel-microcode","fixed_in":["3.20240514.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"intel-microcode","fixed_in":["3.20240514.0ubuntu0.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"intel-microcode","fixed_in":["3.20240514.0ubuntu0.18.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"intel-microcode","fixed_in":["3.20240514.0ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"intel-microcode","fixed_in":["3.20240514.0ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"intel-microcode","fixed_in":["3.20240514.0ubuntu0.24.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240813-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240813-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20240910-1.el9_5"}]}],"bundled":7},{"source":"osv","ecosystem":"Alpaquita:23","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20240312-r0"},{"fixed":"20240813-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20230214-r0"},{"fixed":"20240514-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240514.1~deb12u1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1","3.20180807a.1~deb9u1","3.20180807a.2","3.20180807a.2~bpo8+1","3.20180807a.2~bpo9+1","3.20180807a.2~deb9u1","3.20190312.1","3.20190312.1~bpo9+1","3.20190514.1","3.20190514.1~deb8u1","3.20190514.1~deb9u1","3.20190618.1","3.20190618.1~deb8u1","3.20190618.1~deb9u1","3.20190918.1","3.20191112.1","3.20191112.1~deb10u1","3.20191112.1~deb9u1","3.20191113.1","3.20191115.1","3.20191115.1~deb10u1","3.20191115.1~deb9u1","3.20191115.2","3.20191115.2~deb10u1","3.20191115.2~deb8u1","3.20191115.2~deb9u1","3.20200508.1","3.20200520.1","3.20200609.1","3.20200609.1~deb10u1","3.20200609.1~deb9u1","3.20200609.2","3.20200609.2~deb10u1","3.20200609.2~deb8u1","3.20200609.2~deb9u1","3.20200616.1","3.20200616.1~deb10u1","3.20200616.1~deb9u1","3.20201110.1","3.20201118.1","3.20201118.1~bpo10+1","3.20201118.1~deb10u1","3.20201118.1~deb9u1","3.20210216.1","3.20210216.1~deb10u1","3.20210608.1","3.20210608.2","3.20210608.2~deb10u1","3.20210608.2~deb9u2","3.20220207.1","3.20220207.1~bpo11+1","3.20220207.1~deb10u1","3.20220207.1~deb11u1","3.20220510.1","3.20220510.1~deb10u1","3.20220510.1~deb11u1","3.20220809.1","3.20221108.1","3.20221108.2","3.20230214.1","3.20230214.1~deb10u1","3.20230214.1~deb11u1","3.20230512.1","3.20230808.1","3.20230808.1~deb10u1","3.20230808.1~deb11u1","3.20230808.1~deb12u1","3.20231114.1","3.20231114.1~deb10u1","3.20231114.1~deb11u1","3.20231114.1~deb12u1","3.20240312.1","3.20240312.1~deb10u1","3.20240312.1~deb11u1","3.20240312.1~deb12u1","3.20240514.1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240514.1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1","3.20180807a.1~deb9u1","3.20180807a.2","3.20180807a.2~bpo8+1","3.20180807a.2~bpo9+1","3.20180807a.2~deb9u1","3.20190312.1","3.20190312.1~bpo9+1","3.20190514.1","3.20190514.1~deb8u1","3.20190514.1~deb9u1","3.20190618.1","3.20190618.1~deb8u1","3.20190618.1~deb9u1","3.20190918.1","3.20191112.1","3.20191112.1~deb10u1","3.20191112.1~deb9u1","3.20191113.1","3.20191115.1","3.20191115.1~deb10u1","3.20191115.1~deb9u1","3.20191115.2","3.20191115.2~deb10u1","3.20191115.2~deb8u1","3.20191115.2~deb9u1","3.20200508.1","3.20200520.1","3.20200609.1","3.20200609.1~deb10u1","3.20200609.1~deb9u1","3.20200609.2","3.20200609.2~deb10u1","3.20200609.2~deb8u1","3.20200609.2~deb9u1","3.20200616.1","3.20200616.1~deb10u1","3.20200616.1~deb9u1","3.20201110.1","3.20201118.1","3.20201118.1~bpo10+1","3.20201118.1~deb10u1","3.20201118.1~deb9u1","3.20210216.1","3.20210216.1~deb10u1","3.20210608.1","3.20210608.2","3.20210608.2~deb10u1","3.20210608.2~deb9u2","3.20220207.1","3.20220207.1~bpo11+1","3.20220207.1~deb10u1","3.20220207.1~deb11u1","3.20220510.1","3.20220510.1~deb10u1","3.20220510.1~deb11u1","3.20220809.1","3.20221108.1","3.20221108.2","3.20230214.1","3.20230214.1~deb10u1","3.20230214.1~deb11u1","3.20230512.1","3.20230808.1","3.20230808.1~deb10u1","3.20230808.1~deb11u1","3.20230808.1~deb12u1","3.20231114.1","3.20231114.1~deb10u1","3.20231114.1~deb11u1","3.20231114.1~deb12u1","3.20240312.1","3.20240312.1~deb10u1","3.20240312.1~deb11u1","3.20240312.1~deb12u1","3.20240514.1~deb11u1","3.20240514.1~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240514.1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1","3.20180807a.1~deb9u1","3.20180807a.2","3.20180807a.2~bpo8+1","3.20180807a.2~bpo9+1","3.20180807a.2~deb9u1","3.20190312.1","3.20190312.1~bpo9+1","3.20190514.1","3.20190514.1~deb8u1","3.20190514.1~deb9u1","3.20190618.1","3.20190618.1~deb8u1","3.20190618.1~deb9u1","3.20190918.1","3.20191112.1","3.20191112.1~deb10u1","3.20191112.1~deb9u1","3.20191113.1","3.20191115.1","3.20191115.1~deb10u1","3.20191115.1~deb9u1","3.20191115.2","3.20191115.2~deb10u1","3.20191115.2~deb8u1","3.20191115.2~deb9u1","3.20200508.1","3.20200520.1","3.20200609.1","3.20200609.1~deb10u1","3.20200609.1~deb9u1","3.20200609.2","3.20200609.2~deb10u1","3.20200609.2~deb8u1","3.20200609.2~deb9u1","3.20200616.1","3.20200616.1~deb10u1","3.20200616.1~deb9u1","3.20201110.1","3.20201118.1","3.20201118.1~bpo10+1","3.20201118.1~deb10u1","3.20201118.1~deb9u1","3.20210216.1","3.20210216.1~deb10u1","3.20210608.1","3.20210608.2","3.20210608.2~deb10u1","3.20210608.2~deb9u2","3.20220207.1","3.20220207.1~bpo11+1","3.20220207.1~deb10u1","3.20220207.1~deb11u1","3.20220510.1","3.20220510.1~deb10u1","3.20220510.1~deb11u1","3.20220809.1","3.20221108.1","3.20221108.2","3.20230214.1","3.20230214.1~deb10u1","3.20230214.1~deb11u1","3.20230512.1","3.20230808.1","3.20230808.1~deb10u1","3.20230808.1~deb11u1","3.20230808.1~deb12u1","3.20231114.1","3.20231114.1~deb10u1","3.20231114.1~deb11u1","3.20231114.1~deb12u1","3.20240312.1","3.20240312.1~deb10u1","3.20240312.1~deb11u1","3.20240312.1~deb12u1","3.20240514.1~deb11u1","3.20240514.1~deb12u1"]},{"source":"osv","ecosystem":"Mageia:9","package":"microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20240514-1.mga9.nonfree"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240531-1.oe2003sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240531-1.oe2203sp1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240531-1.oe2403"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240531-1.oe2203sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20230808-2.20240531.1.el9_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20240910-1.el9_5"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:9","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20240910-1.el9_5"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-137.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-137.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-150200.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-102.83.81.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240813-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.20130906.1ubuntu2","1.20130906.1ubuntu3","2.20140122.1","2.20140430.1ubuntu1","2.20140624-t-1ubuntu2","3.20180108.0~ubuntu14.04.2","3.20180108.0+really20170707ubuntu14.04.1","3.20180312.0~ubuntu14.04.1","3.20180425.1~ubuntu0.14.04.1","3.20180425.1~ubuntu0.14.04.2","3.20180807a.0ubuntu0.14.04.1","3.20190514.0ubuntu0.14.04.1","3.20190514.0ubuntu0.14.04.2","3.20190618.0ubuntu0.14.04.1","3.20191112-0ubuntu0.14.04.2","3.20191115.1ubuntu0.14.04.1","3.20191115.1ubuntu0.14.04.2","3.20200609.0ubuntu0.14.04.0","3.20200609.0ubuntu0.14.04.1","3.20201110.0ubuntu0.14.04.1","3.20201110.0ubuntu0.14.04.2","3.20210608.0ubuntu0.14.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240514.0ubuntu0.16.04.1+esm1"}]}],"versions":["3.20150121.1","3.20151106.1","3.20170707.1~ubuntu16.04.0","3.20180108.0~ubuntu16.04.2","3.20180108.0+really20170707ubuntu16.04.1","3.20180312.0~ubuntu16.04.1","3.20180425.1~ubuntu0.16.04.1","3.20180425.1~ubuntu0.16.04.2","3.20180807a.0ubuntu0.16.04.1","3.20190514.0ubuntu0.16.04.1","3.20190514.0ubuntu0.16.04.2","3.20190618.0ubuntu0.16.04.1","3.20191112-0ubuntu0.16.04.2","3.20191115.1ubuntu0.16.04.1","3.20191115.1ubuntu0.16.04.2","3.20200609.0ubuntu0.16.04.0","3.20200609.0ubuntu0.16.04.1","3.20201110.0ubuntu0.16.04.1","3.20201110.0ubuntu0.16.04.2","3.20210216.0ubuntu0.16.04.1","3.20210608.0ubuntu0.16.04.1+esm1","3.20220510.0ubuntu0.16.04.1+esm1","3.20230214.0ubuntu0.16.04.1+esm1","3.20230808.0ubuntu0.16.04.1+esm1","3.20231114.0ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240514.0ubuntu0.18.04.1+esm1"}]}],"versions":["3.20170707.1","3.20171117.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.0~ubuntu18.04.1","3.20180425.1~ubuntu0.18.04.1","3.20180425.1~ubuntu0.18.04.2","3.20180807a.0ubuntu0.18.04.1","3.20190514.0ubuntu0.18.04.2","3.20190514.0ubuntu0.18.04.3","3.20190618.0ubuntu0.18.04.1","3.20191112-0ubuntu0.18.04.2","3.20191115.1ubuntu0.18.04.1","3.20191115.1ubuntu0.18.04.2","3.20200609.0ubuntu0.18.04.0","3.20200609.0ubuntu0.18.04.1","3.20201110.0ubuntu0.18.04.1","3.20201110.0ubuntu0.18.04.2","3.20210216.0ubuntu0.18.04.1","3.20210608.0ubuntu0.18.04.1","3.20220510.0ubuntu0.18.04.1","3.20220809.0ubuntu0.18.04.1","3.20230214.0ubuntu0.18.04.1","3.20230808.0ubuntu0.18.04.1+esm1","3.20231114.0ubuntu0.18.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240514.0ubuntu0.20.04.1"}]}],"versions":["3.20190918.1ubuntu1","3.20191115.1ubuntu1","3.20191115.1ubuntu2","3.20191115.1ubuntu3","3.20200609.0ubuntu0.20.04.0","3.20200609.0ubuntu0.20.04.1","3.20200609.0ubuntu0.20.04.2","3.20201110.0ubuntu0.20.04.1","3.20201110.0ubuntu0.20.04.2","3.20210216.0ubuntu0.20.04.1","3.20210608.0ubuntu0.20.04.1","3.20220510.0ubuntu0.20.04.1","3.20220809.0ubuntu0.20.04.1","3.20230214.0ubuntu0.20.04.1","3.20230808.0ubuntu0.20.04.1","3.20231114.0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240514.0ubuntu0.22.04.1"}]}],"versions":["3.20210608.2ubuntu1","3.20220510.0ubuntu0.22.04.1","3.20220809.0ubuntu0.22.04.1","3.20230214.0ubuntu0.22.04.1","3.20230808.0ubuntu0.22.04.1","3.20231114.0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240514.0ubuntu0.24.04.1"}]}],"versions":["3.20230808.1","3.20231114.0ubuntu1","3.20231114.1","3.20240312.1","3.20240312.1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240514.0ubuntu0.16.04.1+esm1"}]}],"versions":["3.20150121.1","3.20151106.1","3.20170707.1~ubuntu16.04.0","3.20180108.0~ubuntu16.04.2","3.20180108.0+really20170707ubuntu16.04.1","3.20180312.0~ubuntu16.04.1","3.20180425.1~ubuntu0.16.04.1","3.20180425.1~ubuntu0.16.04.2","3.20180807a.0ubuntu0.16.04.1","3.20190514.0ubuntu0.16.04.1","3.20190514.0ubuntu0.16.04.2","3.20190618.0ubuntu0.16.04.1","3.20191112-0ubuntu0.16.04.2","3.20191115.1ubuntu0.16.04.1","3.20191115.1ubuntu0.16.04.2","3.20200609.0ubuntu0.16.04.0","3.20200609.0ubuntu0.16.04.1","3.20201110.0ubuntu0.16.04.1","3.20201110.0ubuntu0.16.04.2","3.20210216.0ubuntu0.16.04.1","3.20210608.0ubuntu0.16.04.1+esm1","3.20220510.0ubuntu0.16.04.1+esm1","3.20230214.0ubuntu0.16.04.1+esm1","3.20230808.0ubuntu0.16.04.1+esm1","3.20231114.0ubuntu0.16.04.1+esm1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240514.0ubuntu0.18.04.1+esm1"}]}],"versions":["3.20170707.1","3.20171117.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.0~ubuntu18.04.1","3.20180425.1~ubuntu0.18.04.1","3.20180425.1~ubuntu0.18.04.2","3.20180807a.0ubuntu0.18.04.1","3.20190514.0ubuntu0.18.04.2","3.20190514.0ubuntu0.18.04.3","3.20190618.0ubuntu0.18.04.1","3.20191112-0ubuntu0.18.04.2","3.20191115.1ubuntu0.18.04.1","3.20191115.1ubuntu0.18.04.2","3.20200609.0ubuntu0.18.04.0","3.20200609.0ubuntu0.18.04.1","3.20201110.0ubuntu0.18.04.1","3.20201110.0ubuntu0.18.04.2","3.20210216.0ubuntu0.18.04.1","3.20210608.0ubuntu0.18.04.1","3.20220510.0ubuntu0.18.04.1","3.20220809.0ubuntu0.18.04.1","3.20230214.0ubuntu0.18.04.1","3.20230808.0ubuntu0.18.04.1+esm1","3.20231114.0ubuntu0.18.04.1+esm1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240514.0ubuntu0.20.04.1"}]}],"versions":["3.20190918.1ubuntu1","3.20191115.1ubuntu1","3.20191115.1ubuntu2","3.20191115.1ubuntu3","3.20200609.0ubuntu0.20.04.0","3.20200609.0ubuntu0.20.04.1","3.20200609.0ubuntu0.20.04.2","3.20201110.0ubuntu0.20.04.1","3.20201110.0ubuntu0.20.04.2","3.20210216.0ubuntu0.20.04.1","3.20210608.0ubuntu0.20.04.1","3.20220510.0ubuntu0.20.04.1","3.20220809.0ubuntu0.20.04.1","3.20230214.0ubuntu0.20.04.1","3.20230808.0ubuntu0.20.04.1","3.20231114.0ubuntu0.20.04.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240514.0ubuntu0.22.04.1"}]}],"versions":["3.20210608.2ubuntu1","3.20220510.0ubuntu0.22.04.1","3.20220809.0ubuntu0.22.04.1","3.20230214.0ubuntu0.22.04.1","3.20230808.0ubuntu0.22.04.1","3.20231114.0ubuntu0.22.04.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240514.0ubuntu0.24.04.1"}]}],"versions":["3.20230808.1","3.20231114.0ubuntu1","3.20231114.1","3.20240312.1","3.20240312.1build1"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ucode-intel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240514-1.1"}]}],"bundled":3}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html","tags":["x_transferred","advisory","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45733","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fg3p-42cv-c5cm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-45733","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9401","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22655","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28746","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38575","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39368","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-43490","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45733","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46103","tags":["report"]},{"url":"https://bugzilla.redhat.com/2270698","tags":["report"]},{"url":"https://bugzilla.redhat.com/2270700","tags":["report"]},{"url":"https://bugzilla.redhat.com/2270701","tags":["report"]},{"url":"https://bugzilla.redhat.com/2270703","tags":["report"]},{"url":"https://bugzilla.redhat.com/2270704","tags":["report"]},{"url":"https://bugzilla.redhat.com/2292296","tags":["report"]},{"url":"https://bugzilla.redhat.com/2292300","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9401.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-45733","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-45733","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0207.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33251","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6797-1","tags":["advisory"]},{"url":"https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514","tags":["web","article","report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1730","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45745","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46103","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47855","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1731","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1732","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22655","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28746","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38575","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39368","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43490","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1753","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHEA-2024:7620","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhea-2024_7620.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270698","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22655","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270700","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28746","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270701","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38575","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270703","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39368","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270704","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-43490","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292296","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45733","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292300","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46103","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9401.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9401","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241684-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1224277","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47855","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241771-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251032-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206418","tags":["report"]},{"url":"https://bugzilla.suse.com/1211382","tags":["report"]},{"url":"https://bugzilla.suse.com/1214099","tags":["report"]},{"url":"https://bugzilla.suse.com/1215278","tags":["report"]},{"url":"https://bugzilla.suse.com/1221323","tags":["report"]},{"url":"https://bugzilla.suse.com/1229129","tags":["report"]},{"url":"https://bugzilla.suse.com/1230400","tags":["report"]},{"url":"https://bugzilla.suse.com/1233313","tags":["report"]},{"url":"https://bugzilla.suse.com/1237096","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-25939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-37020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39355","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520020-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-45733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-22655","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-28746","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-38575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-39368","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-43490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45745","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-46103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-47855","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-45733","description":"Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.","status":"published","published":"2024-05-16T20:47:09.057Z","modified":"2024-08-02T20:29:32.455Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-1298"],"updated_at":"2026-11-02T14:35:22.640346Z"}],"euvd":[{"id":"EUVD-2023-50022","description":"Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.","status":"published","published":"2024-05-16T20:47:09Z","modified":"2024-08-02T20:29:32Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-03T03:49:58.963788Z"}],"ghsa":[{"id":"GHSA-fg3p-42cv-c5cm","title":"Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated...","description":"Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.","status":"published","published":"2024-05-16T21:32:00Z","modified":"2024-05-16T21:32:08Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-1298"],"updated_at":"2026-11-02T14:57:22.29356Z"}],"nvd":[{"id":"CVE-2023-45733","description":"Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.","status":"published","published":"2024-05-16T21:15:57.84Z","modified":"2026-06-17T06:29:25.393Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-1298"],"updated_at":"2026-11-02T14:09:15.329996Z"}],"osv":[{"id":"ALPINE-CVE-2023-45733","description":"Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.","status":"published","published":"2024-05-16T21:15:57.84Z","modified":"2026-10-26T17:17:58.645855708Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"BELL-CVE-2023-45733","status":"published","published":"2024-05-17T05:57:44.236338Z","modified":"2026-01-26T09:35:33.446535Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"DEBIAN-CVE-2023-45733","description":"Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.","status":"published","published":"2024-05-16T21:15:57.84Z","modified":"2026-10-26T18:02:49.442421949Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"OESA-2024-1730","title":"microcode_ctl security update","description":"This is a tool to transform and deploy microcode update for x86 CPUs.\r\n\r\nSecurity Fix(es):\r\n\r\nHardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.(CVE-2023-45733)\r\n\r\nImproper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-45745)\r\n\r\nSequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.(CVE-2023-46103)\r\n\r\nImproper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-47855)","status":"published","published":"2024-06-14T11:07:11Z","modified":"2026-08-18T01:17:24.407068053Z","cvss":[{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1731","title":"microcode_ctl security update","description":"This is a tool to transform and deploy microcode update for x86 CPUs.\r\n\r\nSecurity Fix(es):\r\n\r\nHardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.(CVE-2023-45733)\r\n\r\nImproper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-45745)\r\n\r\nSequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.(CVE-2023-46103)\r\n\r\nImproper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-47855)","status":"published","published":"2024-06-14T11:07:11Z","modified":"2026-08-18T01:17:24.450243628Z","cvss":[{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1732","title":"microcode_ctl security update","description":"This is a tool to transform and deploy microcode update for x86 CPUs.\r\n\r\nSecurity Fix(es):\r\n\r\nProtection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-22655)\r\n\r\nInformation exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.(CVE-2023-28746)\r\n\r\nNon-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.(CVE-2023-38575)\r\n\r\nProtection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable denial of service via network access.(CVE-2023-39368)\r\n\r\nIncorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allow a privileged user to potentially enable information disclosure via local access.(CVE-2023-43490)\r\n\r\nHardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.(CVE-2023-45733)\r\n\r\nImproper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-45745)\r\n\r\nSequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.(CVE-2023-46103)\r\n\r\nImproper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-47855)","status":"published","published":"2024-06-14T11:07:11Z","modified":"2026-08-18T01:17:24.411395151Z","cvss":[{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1753","title":"microcode_ctl security update","description":"This is a tool to transform and deploy microcode update for x86 CPUs.\r\n\r\nSecurity Fix(es):\r\n\r\nHardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.(CVE-2023-45733)\r\n\r\nImproper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-45745)\r\n\r\nSequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.(CVE-2023-46103)\r\n\r\nImproper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-47855)","status":"published","published":"2024-06-21T11:07:13Z","modified":"2026-08-18T01:17:24.685461767Z","cvss":[{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"RHEA-2024:7620","title":"Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update","status":"published","published":"2025-01-21T10:04:47Z","modified":"2026-08-07T10:11:35Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2024:9401","title":"Red Hat Security Advisory: microcode_ctl security update","status":"published","published":"2024-11-12T18:05:57Z","modified":"2026-08-07T10:16:41Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"UBUNTU-CVE-2023-45733","description":"Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.","status":"published","published":"2024-05-16T21:15:00Z","modified":"2026-02-04T03:09:05.199824Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2024:9401","title":"Moderate: microcode_ctl security update","description":"The microcode_ctl packages provide microcode updates for Intel and AMD processors.  \n\nSecurity Fix(es):  \n\n  * kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655)\n  * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)\n  * kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575)\n  * kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368)\n  * kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490)\n  * intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733)\n  * intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2024-11-12T00:00:00Z","modified":"2026-10-29T11:30:09.402361814Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"CVE-2023-45733","description":"Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.","status":"published","published":"2024-05-16T21:15:57Z","modified":"2026-04-16T04:33:02.291099477Z","updated_at":"2026-11-02T15:44:34.287121Z"},{"id":"MGASA-2024-0207","title":"Updated microcode packages fix security vulnerabilities","description":"The updated package fixes security vulnerabilities:\nHardware logic contains race conditions in some Intel(R) Processors may\nallow an authenticated user to potentially enable partial information\ndisclosure via local access. (CVE-2023-45733)\nSequence of processor instructions leads to unexpected behavior in\nIntel(R) Core(TM) Ultra Processors may allow an authenticated user to\npotentially enable denial of service via local access. (CVE-2023-46103)\nImproper input validation in some Intel(R) TDX module software before\nversion 1.5.05.46.698 may allow a privileged user to potentially enable\nescalation of privilege via local access. (CVE-2023-45745)\n","status":"published","published":"2024-06-03T18:30:48Z","modified":"2026-04-16T04:41:34.443256738Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13974-1","title":"ucode-intel-20240514-1.1 on GA media","description":"These are all security issues fixed in the ucode-intel-20240514-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:47:44.018684Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"RLSA-2024:9401","title":"Moderate: microcode_ctl security update","description":"The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655)\n\n* kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)\n\n* kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575)\n\n* kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368)\n\n* kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490)\n\n* intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733)\n\n* intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.","status":"published","published":"2025-03-17T20:16:43.608626Z","modified":"2026-02-04T22:15:09.093817Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"SUSE-SU-2024:1684-1","title":"Security update for ucode-intel","description":"This update for ucode-intel fixes the following issues:\n\nIntel CPU Microcode was updated to the 20240514 release (bsc#1224277)\n\n- CVE-2023-45733: Fixed a potential security vulnerability in some\n  Intel® Processors that may have allowed information disclosure.\n- CVE-2023-46103: Fixed a potential security vulnerability in Intel®\n  Core™ Ultra Processors that may have allowed denial of service.\n- CVE-2023-45745,CVE-2023-47855: Fixed a potential security\n  vulnerabilities in some Intel® Trust Domain Extensions (TDX) module\n  software that may have allowed escalation of privilege.\n","status":"published","published":"2024-05-18T17:58:41Z","modified":"2025-05-02T04:35:34.537693Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1771-1","title":"Security update for ucode-intel","description":"This update for ucode-intel fixes the following issues:\n\nIntel CPU Microcode was updated to the 20240514 release (bsc#1224277)\n\n- CVE-2023-45733: Fixed a potential security vulnerability in some\n  Intel® Processors that may have allowed information disclosure.\n- CVE-2023-46103: Fixed a potential security vulnerability in Intel®\n  Core™ Ultra Processors that may have allowed denial of service.\n- CVE-2023-45745,CVE-2023-47855: Fixed a potential security\n  vulnerabilities in some Intel® Trust Domain Extensions (TDX) module\n  software that may have allowed escalation of privilege.\n","status":"published","published":"2024-05-23T19:06:42Z","modified":"2026-02-04T04:10:58.172955Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2025:1032-1","title":"Security update for microcode_ctl","description":"This update for microcode_ctl fixes the following issues:\n\n - CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware\n     Logic for some Intel Processors may allow privileged user to\n     potentially enable denial of service via local access. (bsc#1237096)\n - CVE-2024-36293: A potential security vulnerability in some Intel\n     Software Guard Extensions (Intel SGX) Platforms may allow denial\n     of service. Intel is releasing microcode updates to mitigate this\n     potential vulnerability. (bsc#1237096)\n - CVE-2024-39355: A potential security vulnerability in some\n     13th and 14th Generation Intel Core Processors may allow denial\n     of service. Intel is releasing microcode and UEFI reference code\n     updates to mitigate this potential vulnerability. (bsc#1237096)\n - CVE-2024-37020: A potential security vulnerability in the Intel\n     Data Streaming Accelerator (Intel DSA) for some Intel Xeon Processors\n     may allow denial of service. Intel is releasing software updates to\n     mitigate this potential vulnerability. (bsc#1237096)\n - CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic\n     in some 4th and 5th Generation Intel Xeon Processors may allow an\n     authorized user to potentially enable denial of service via local access. (bsc#1233313) \n - CVE-2024-23918: Improper conditions check in some Intel Xeon processor\n     memory controller configurations when using Intel SGX may allow a\n     privileged user to potentially enable escalation of privilege via\n     local access. (bsc#1233313)\n - CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor\n     memory controller configurations when using Intel SGX may allow a privileged\n     user to potentially enable escalation of privilege via local access. (bsc#1233313)\n - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in\n     some Intel Processors may allow an privileged user to potentially enable a\n     denial of service via local access. (bsc#1230400)\n - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel\n     Processors may allow a privileged user to potentially enable information\n     disclosure via local access. (bsc#1230400)\n - CVE-2024-24853: Incorrect behavior order in transition between executive\n     monitor and SMI transfer monitor (STM) in some Intel(R) Processor may\n     allow a privileged user to potentially enable escalation of privilege\n     via local access. (bsc#1229129)\n - CVE-2024-25939: Mirrored regions with different values in 3rd Generation Intel(R)\n     Xeon(R) Scalable Processors may allow a privileged user to potentially enable\n     denial of service via local access. (bsc#1229129)\n - CVE-2024-24980: Protection mechanism failure in some 3rd, 4th, and 5th Generation\n     Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable\n     escalation of privilege via local access. (bsc#1229129)\n - CVE-2023-42667: Improper isolation in the Intel(R) Core(TM) Ultra Processor stream\n     cache mechanism may allow an authenticated user to potentially enable escalation\n     of privilege via local access. (bsc#1229129)\n - CVE-2023-49141: Improper isolation in some Intel(R) Processors stream cache mechanism\n     may allow an authenticated user to potentially enable escalation of privilege via\n     local access. (bsc#1229129)\n - CVE-2023-45733: Hardware logic contains race conditions in some Intel(R) Processors\n     may allow an authenticated user to potentially enable partial information disclosure\n     via local access. (bsc#1224277)\n - CVE-2023-46103: Sequence of processor instructions leads to unexpected behavior in\n     Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially\n     enable denial of service via local access. (bsc#1224277)\n - CVE-2023-45745: Improper input validation in some Intel(R) TDX module software before\n     version 1.5.05.46.698 may allow a privileged user to potentially enable escalation\n     of privilege via local access. (bsc#1224277)\n - CVE-2023-47855: Improper input validation in some Intel(R) TDX module software before\n     version 1.5.05.46.698 may allow a privileged user to potentially enable escalation\n     of privilege via local access. (bsc#1224277)\n - CVE-2023-39368: Protection mechanism failure of bus lock regulator\n     for some Intel Processors may allow an unauthenticated user to\n     potentially enable denial of service via network access. (bsc#1221323)\n - CVE-2023-38575: Non-transparent sharing of return predictor targets\n     between contexts in some Intel Processors may allow an authorized\n     user to potentially enable information disclosure via local access. (bsc#1221323)   \n - CVE-2023-28746: Information exposure through microarchitectural\n     state after transient execution from some register files for some\n     Intel Atom Processors may allow an authenticated user to potentially\n     enable information disclosure via local access. (bsc#1221323)\n - CVE-2023-22655: Protection mechanism failure in some 3rd and 4th\n     Generation Intel Xeon Processors when using Intel SGX or Intel TDX\n     may allow a privileged user to potentially enable escalation of\n     privilege via local access. (bsc#1221323)\n - CVE-2023-43490: Incorrect calculation in microcode keying mechanism\n     for some Intel Xeon D Processors with Intel SGX may allow a\n     privileged user to potentially enable information disclosure via\n     local access.  (bsc#1221323)\n - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)\n - CVE-2022-40982: Information exposure through microarchitectural state after transient\n     execution in certain vector execution units for some Intel(R) Processors may allow\n     an authenticated user to potentially enable information disclosure via local access. (bsc#1206418) \n - CVE-2023-23908: Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable\n     processors may allow a privileged user to potentially enable information disclosure\n     via local access.\n - CVE-2022-41804: Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some\n     Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation\n     of privilege via local access.\n\nOther fixes:\n    \n- Intel CPU Microcode was updated to the 20250211 release (bsc#1237096)\n  - Security updates for INTEL-SA-01166 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html\n  - Security updates for INTEL-SA-01213 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html\n  - Security updates for INTEL-SA-01139 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html\n  - Security updates for INTEL-SA-01228 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01228.html\n  - Security updates for INTEL-SA-01194 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01194.html\n  - Update for functional issues. Refer to Intel Core Ultra Processor https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.\n  - Update for functional issues. Refer to 13th/14th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.\n  - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.\n  - Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123 for details.\n  - Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.\n  - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.\n  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.\n  - Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.\n  - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071 for details.\n  - Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/709192 for details.\n  - Update for functional issues. Refer to Intel Xeon 6700-Series Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/820922 for details.\n  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details\n\n- Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)\n  - Security updates for [INTEL-SA-01101](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html).\n  - Security updates for [INTEL-SA-01079](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html).\n  - Security updates for [INTEL-SA-01079](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html).\n  - Updated security updates for [INTEL-SA-01097](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html).\n  - Updated security updates for [INTEL-SA-01103](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html).\n  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n  - Update for functional issues. Refer to [14th/13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [5th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/793902) for details.\n  - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-1700 and D-1800 Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714069) for details\n\n- Intel CPU Microcode was updated to the 20241029 release (bsc#1230400)\n  - Update for functional issues. Refer to [14th/13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n\n- Intel CPU Microcode was updated to the 20240910 release (bsc#1230400)\n  - Security updates for [INTEL-SA-01103](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html)\n  - Security updates for [INTEL-SA-01097](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html)\n  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n\n- Intel CPU Microcode was updated to the 20240813 release (bsc#1229129)\n  - Security updates for [INTEL-SA-01083](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html)\n  - Security updates for [INTEL-SA-01118](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html)\n  - Security updates for [INTEL-SA-01100](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html)\n  - Security updates for [INTEL-SA-01038](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html)\n  - Security updates for [INTEL-SA-01046](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html)\n  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n  - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n  - Update for functional issues. Refer to [10th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.\n  - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.\n  - Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.\n  - Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n  - Update for functional issues. Refer to [Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications](https://cdrdv2.intel.com/v1/dl/getContent/636674) for details.\n\n- Intel CPU Microcode was updated to 20240531 release:\n  - Update for functional issues. Refer to Intel Pentium Silver\n    and Intel Celeron Processor Specification Update\n  \n- Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)\n  - Security updates for INTEL-SA-01051 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html\n  - Security updates for INTEL-SA-01052 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html\n  - Security updates for INTEL-SA-01036 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html\n  - Update for functional issues. Refer to 5th Gen Intel Xeon Processor Scalable Family https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.\n  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.\n  - Update for functional issues. Refer to 14th 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.\n  - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.\n  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.\n\n- - Intel CPU Microcode was updated to 20240312 release. (bsc#1221323)\n  - Security updates for INTEL-SA-INTEL-SA-00972 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html\n  - Security updates for INTEL-SA-INTEL-SA-00982 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html\n  - Security updates for INTEL-SA-INTEL-SA-00898 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html\n  - Security updates for INTEL-SA-INTEL-SA-00960 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html\n  - Security updates for INTEL-SA-INTEL-SA-01045 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html\n  - Update for functional issues. Refer to Intel Core Ultra Processor https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.\n  - Update for functional issues. Refer to 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.\n  - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.\n  - Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123 for details.\n  - Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/341079 for details.\n  - Update for functional issues. Refer to 10th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/615213 for details.\n  - Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.\n  - Update for functional issues. Refer to 8th Generation Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338025 for details.\n  - Update for functional issues. Refer to 7th and 8th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/334663 for details.\n  - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.\n  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.\n  - Update for functional issues. Refer to 3rd Generation Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634897 for details.\n  - Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.\n  - Update for functional issues. Refer to 2nd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338848 for details.\n  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.\n  - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071 for details.\n  - Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update  https://cdrdv2.intel.com/v1/dl/getContent/709192 for details.\n  - Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/613537 for details.\n  - Update for functional issues. Refer to Intel Atom C3000 Processor Product Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336345 for details.\n  - Update for functional issues. Refer to Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications https://cdrdv2.intel.com/v1/dl/getContent/636674 for details.\n  - Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336562 for details.\n  - Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634542 for details.\n  \n- Intel CPU Microcode was updated to 20231114 release. (bsc#1215278)\n  - Security updates for [INTEL-SA-00950](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html)\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n  - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n \n- Intel CPU Microcode was updated to 20231114 pre-release (labeled 20231113). (bsc#1215278)\n\n- Intel CPU Microcode was updated to 20230808 release. (bsc#1214099)\n  - Security updates for [INTEL-SA-00828](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html) (bsc#1206418)\n  - Security updates for [INTEL-SA-00836](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html)\n  - Security updates for [INTEL-SA-00837](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html)\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n  - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.\n  - Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.\n  - Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n  - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n  - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.\n  - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n  - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-2100 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338854) for details.\n  \n- Intel CPU Microcode was updated to 20230613 release.\n  \n- Intel CPU Microcode was updated to 20230512 release.\n    \n- Intel CPU Microcode was updated to 20230512 release. (bsc#1211382)\n","status":"published","published":"2025-03-26T14:22:25Z","modified":"2026-02-04T02:25:38.270247Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20020-1","title":"Security update for ucode-intel","description":"This update for ucode-intel fixes the following issues:\n\n- Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)\n  - CVE-2023-45733: Security updates for  INTEL-SA-01051\n  - CVE-2023-46103: Security updates for  INTEL-SA-01052\n  - CVE-2023-45745,CVE-2023-47855: Security updates for INTEL-SA-01036\n\n- Updated to Intel CPU Microcode 20240312 release. (bsc#1221323)\n  - Security updates for INTEL-SA-INTEL-SA-00972\n    - CVE-2023-39368: Protection mechanism failure of bus lock regulator\n      for some Intel Processors may allow an unauthenticated user to\n      potentially enable denial of service via network access\n  - Security updates for INTEL-SA-INTEL-SA-00982\n    - CVE-2023-38575: Non-transparent sharing of return predictor targets\n      between contexts in some Intel Processors may allow an authorized\n      user to potentially enable information disclosure via local access.\n  - Security updates for INTEL-SA-INTEL-SA-00898\n    - CVE-2023-28746: Information exposure through microarchitectural\n      state after transient execution from some register files for some\n      Intel Atom Processors may allow an authenticated user to potentially\n      enable information disclosure via local access.\n  - Security updates for INTEL-SA-INTEL-SA-00960\n    - CVE-2023-22655 Protection mechanism failure in some 3rd and 4th\n      Generation Intel Xeon Processors when using Intel SGX or Intel TDX\n      may allow a privileged user to potentially enable escalation of\n      privilege via local access.\n  - Security updates for INTEL-SA-INTEL-SA-01045\n    - CVE-2023-43490: Incorrect calculation in microcode keying mechanism\n      for some Intel Xeon D Processors with Intel SGX may allow a\n      privileged user to potentially enable information disclosure via\n      local access.\n","status":"published","published":"2025-02-03T08:49:06Z","modified":"2026-03-23T04:48:50.322972Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-6797-1","title":"intel-microcode vulnerabilities","description":"It was discovered that some 3rd and 4th Generation Intel® Xeon® Processors\ndid not properly restrict access to certain hardware features when using\nIntel® SGX or Intel® TDX. This may allow a privileged local user to\npotentially further escalate their privileges on the system. This issue only\naffected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and\nUbuntu 16.04 LTS. (CVE-2023-22655)\n\nIt was discovered that some Intel® Atom® Processors did not properly clear\nregister state when performing various operations. A local attacker could\nuse this to obtain sensitive information via a transient execution attack.\nThis issue only affected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS,\nUbuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2023-28746)\n\nIt was discovered that some Intel® Processors did not properly clear the\nstate of various hardware structures when switching execution contexts. A\nlocal attacker could use this to access privileged information. This issue only\naffected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and\nUbuntu 16.04 LTS. (CVE-2023-38575)\n\nIt was discovered that some Intel® Processors did not properly enforce bus\nlock regulator protections. A remote attacker could use this to cause a\ndenial of service. This issue only affected Ubuntu 23.10, Ubuntu 22.04 LTS,\nUbuntu 20.04 LTS, Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2023-39368)\n\nIt was discovered that some Intel® Xeon® D Processors did not properly\ncalculate the SGX base key when using Intel® SGX. A privileged local\nattacker could use this to obtain sensitive information. This issue only\naffected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and\nUbuntu 16.04 LTS. (CVE-2023-43490)\n\nIt was discovered that some Intel® Processors did not properly protect against\nconcurrent accesses. A local attacker could use this to obtain sensitive\ninformation. (CVE-2023-45733)\n\nIt was discovered that some Intel® Processors TDX module software did not\nproperly validate input. A privileged local attacker could use this information\nto potentially further escalate their privileges on the system.\n(CVE-2023-45745, CVE-2023-47855)\n\nIt was discovered that some Intel® Core™ Ultra processors did not properly\nhandle particular instruction sequences. A local attacker could use this\nissue to cause a denial of service. (CVE-2023-46103)\n","status":"published","published":"2024-05-29T07:13:42Z","modified":"2026-06-25T13:32:28.789870577Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}