SUSE-SU-2024:3995-1

This update for ucode-intel fixes the following issues:

• Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)

  • CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via local access.
  • CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
  • CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
  • CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access.
  • CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access.
  • Update for functional issues. New Platforms:

    Processor	Stepping	F-M-S/PI	Old Ver	New Ver	Products
    Updated Platforms:
    Processor	Stepping	F-M-S/PI	Old Ver	New Ver	Products
    :---------------	:---------	:------------	:---------	:---------	:---------
    ADL	C0	06-97-02/07	00000036	00000037	Core Gen12
    ADL	H0	06-97-05/07	00000036	00000037	Core Gen12
    ADL	L0	06-9a-03/80	00000434	00000435	Core Gen12
    ADL	R0	06-9a-04/80	00000434	00000435	Core Gen12
    EMR-SP	A0	06-cf-01/87	21000230	21000283	Xeon Scalable Gen5
    EMR-SP	A1	06-cf-02/87	21000230	21000283	Xeon Scalable Gen5
    MTL	C0	06-aa-04/e6	0000001f	00000020	Core™ Ultra Processor
    RPL-H/P/PX 6+8	J0	06-ba-02/e0	00004122	00004123	Core Gen13
    RPL-HX/S	C0	06-bf-02/07	00000036	00000037	Core Gen13/Gen14
    RPL-S	H0	06-bf-05/07	00000036	00000037	Core Gen13/Gen14
    RPL-U 2+8	Q0	06-ba-03/e0	00004122	00004123	Core Gen13
    SPR-SP	E3	06-8f-06/87	2b0005c0	2b000603	Xeon Scalable Gen4
    SPR-SP	E4/S2	06-8f-07/87	2b0005c0	2b000603	Xeon Scalable Gen4
    SPR-SP	E5/S3	06-8f-08/87	2b0005c0	2b000603	Xeon Scalable Gen4
    New Disclosures Updated in Prior Releases:
    Processor	Stepping	F-M-S/PI	Old Ver	New Ver	Products
    :---------------	:---------	:------------	:---------	:---------	:---------
    ICL-D	B0	06-6c-01/10	010002b0	N/A	Xeon D-17xx/D-18xx, D-27xx/D-28xx
    ICX-SP	Dx/M1	06-6a-06/87	0d0003e7	N/A	Xeon Scalable Gen3

• Intel CPU Microcode was updated to the 20241029 release Update for functional issues. Updated Platforms:

  Processor	Stepping	F-M-S/PI	Old Ver	New Ver	Products
  RPL-E/HX/S	B0	06-b7-01/32	00000129	0000012b	Core Gen13/Gen14