SUSE-SU-2024:4053-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2024/suse-su-20244053-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2024:4053-1
Related
Published
2024-11-26T03:36:57Z
Modified
2024-11-26T03:36:57Z
Summary
Security update for ucode-intel
Details

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)

    • CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via local access.
    • CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    • CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    • CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access.
    • CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access.
    • Update for functional issues. New Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/07 | 00000036 | 00000037 | Core Gen12 | ADL | H0 | 06-97-05/07 | 00000036 | 00000037 | Core Gen12 | ADL | L0 | 06-9a-03/80 | 00000434 | 00000435 | Core Gen12 | ADL | R0 | 06-9a-04/80 | 00000434 | 00000435 | Core Gen12 | EMR-SP | A0 | 06-cf-01/87 | 21000230 | 21000283 | Xeon Scalable Gen5 | EMR-SP | A1 | 06-cf-02/87 | 21000230 | 21000283 | Xeon Scalable Gen5 | MTL | C0 | 06-aa-04/e6 | 0000001f | 00000020 | Core™ Ultra Processor | RPL-H/P/PX 6+8 | J0 | 06-ba-02/e0 | 00004122 | 00004123 | Core Gen13 | RPL-HX/S | C0 | 06-bf-02/07 | 00000036 | 00000037 | Core Gen13/Gen14 | RPL-S | H0 | 06-bf-05/07 | 00000036 | 00000037 | Core Gen13/Gen14 | RPL-U 2+8 | Q0 | 06-ba-03/e0 | 00004122 | 00004123 | Core Gen13 | SPR-SP | E3 | 06-8f-06/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 | SPR-SP | E4/S2 | 06-8f-07/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 New Disclosures Updated in Prior Releases: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ICL-D | B0 | 06-6c-01/10 | 010002b0 | N/A | Xeon D-17xx/D-18xx, D-27xx/D-28xx | ICX-SP | Dx/M1 | 06-6a-06/87 | 0d0003e7 | N/A | Xeon Scalable Gen3

  • Intel CPU Microcode was updated to the 20241029 release Update for functional issues. Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | RPL-E/HX/S | B0 | 06-b7-01/32 | 00000129 | 0000012b | Core Gen13/Gen14

References

Affected packages

SUSE:Linux Enterprise Micro 5.3 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.4 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.5 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP5 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP6 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP2-LTSS / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP3-LTSS / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP4-LTSS / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 15 SP2 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 15 SP3 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 15 SP4 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Manager Proxy 4.3 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Manager%20Proxy%204.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Manager Server 4.3 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Manager%20Server%204.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.1 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.2 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

SUSE:Enterprise Storage 7.1 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Enterprise%20Storage%207.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

openSUSE:Leap Micro 5.5 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/opensuse/ucode-intel&distro=openSUSE%20Leap%20Micro%205.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

openSUSE:Leap 15.5 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/opensuse/ucode-intel&distro=openSUSE%20Leap%2015.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}

openSUSE:Leap 15.6 / ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/opensuse/ucode-intel&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries": [
        {
            "ucode-intel": "20241112-150200.50.1"
        }
    ]
}