SUSE-SU-2025:20092-1

This update for ucode-intel fixes the following issues:

• Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)

  • CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via local access.
  • CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
  • CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
  • CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access.
  • CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access.
  • Update for functional issues.

  Updated Platforms:

  Processor	Stepping	F-M-S/PI	Old Ver	New Ver	Products
  ADL	C0	06-97-02/07	00000036	00000037	Core Gen12
  ADL	H0	06-97-05/07	00000036	00000037	Core Gen12
  ADL	L0	06-9a-03/80	00000434	00000435	Core Gen12
  ADL	R0	06-9a-04/80	00000434	00000435	Core Gen12
  EMR-SP	A0	06-cf-01/87	21000230	21000283	Xeon Scalable Gen5
  EMR-SP	A1	06-cf-02/87	21000230	21000283	Xeon Scalable Gen5
  MTL	C0	06-aa-04/e6	0000001f	00000020	Core™ Ultra Processor
  RPL-H/P/PX 6+8	J0	06-ba-02/e0	00004122	00004123	Core Gen13
  RPL-HX/S	C0	06-bf-02/07	00000036	00000037	Core Gen13/Gen14
  RPL-S	H0	06-bf-05/07	00000036	00000037	Core Gen13/Gen14
  RPL-U 2+8	Q0	06-ba-03/e0	00004122	00004123	Core Gen13
  SPR-SP	E3	06-8f-06/87	2b0005c0	2b000603	Xeon Scalable Gen4
  SPR-SP	E4/S2	06-8f-07/87	2b0005c0	2b000603	Xeon Scalable Gen4
  SPR-SP	E5/S3	06-8f-08/87	2b0005c0	2b000603	Xeon Scalable Gen4

  New Disclosures Updated in Prior Releases:

  Processor	Stepping	F-M-S/PI	Old Ver	New Ver	Products
  ICL-D	B0	06-6c-01/10	010002b0	N/A	Xeon D-17xx/D-18xx, D-27xx/D-28xx
  ICX-SP	Dx/M1	06-6a-06/87	0d0003e7	N/A	Xeon Scalable Gen3

• Intel CPU Microcode was updated to the 20241029 release Update for functional issues.

  Updated Platforms:

  Processor	Stepping	F-M-S/PI	Old Ver	New Ver	Products
  RPL-E/HX/S	B0	06-b7-01/32	00000129	0000012b	Core Gen13/Gen14