SUSE-SU-2024:0917-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:0917-1

Related

Published

2024-03-18T08:13:13Z

Modified

2024-03-18T08:13:13Z

Summary

Security update for ucode-intel

Details

This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20240312 release. (bsc#1221323)
CVE-2023-39368: Protection mechanism failure of bus lock regulator for some Intel Processors may allow an unauthenticated user to potentially enable denial of service via network access
CVE-2023-38575: Non-transparent sharing of return predictor targets between contexts in some Intel Processors may allow an authorized user to potentially enable information disclosure via local access.
CVE-2023-28746: Information exposure through microarchitectural state after transient execution from some register files for some Intel Atom Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2023-22655 Protection mechanism failure in some 3rd and 4th Generation Intel Xeon Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2023-43490: Incorrect calculation in microcode keying mechanism for some Intel Xeon D Processors with Intel� SGX may allow a privileged user to potentially enable information disclosure via local access.

References

Affected packages

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-134.1

{
    "binaries": [
        {
            "ucode-intel": "20240312-134.1"
        }
    ]
}

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-134.1

{
    "binaries": [
        {
            "ucode-intel": "20240312-134.1"
        }
    ]
}