SUSE-SU-2024:4053-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2024/suse-su-20244053-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2024:4053-1
Upstream
CVE (5)
Related
CVE (5)
Published
2024-11-26T03:36:57Z
Modified
2026-02-04T02:43:42Z
Summary
Security update for ucode-intel
Details

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)

    • CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via local access.
    • CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    • CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    • CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access.
    • CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access.
    • Update for functional issues. New Platforms:
      Processor Stepping F-M-S/PI Old Ver New Ver Products
      Updated Platforms:
      Processor Stepping F-M-S/PI Old Ver New Ver Products
      :--------------- :--------- :------------ :--------- :--------- :---------
      ADL C0 06-97-02/07 00000036 00000037 Core Gen12
      ADL H0 06-97-05/07 00000036 00000037 Core Gen12
      ADL L0 06-9a-03/80 00000434 00000435 Core Gen12
      ADL R0 06-9a-04/80 00000434 00000435 Core Gen12
      EMR-SP A0 06-cf-01/87 21000230 21000283 Xeon Scalable Gen5
      EMR-SP A1 06-cf-02/87 21000230 21000283 Xeon Scalable Gen5
      MTL C0 06-aa-04/e6 0000001f 00000020 Core™ Ultra Processor
      RPL-H/P/PX 6+8 J0 06-ba-02/e0 00004122 00004123 Core Gen13
      RPL-HX/S C0 06-bf-02/07 00000036 00000037 Core Gen13/Gen14
      RPL-S H0 06-bf-05/07 00000036 00000037 Core Gen13/Gen14
      RPL-U 2+8 Q0 06-ba-03/e0 00004122 00004123 Core Gen13
      SPR-SP E3 06-8f-06/87 2b0005c0 2b000603 Xeon Scalable Gen4
      SPR-SP E4/S2 06-8f-07/87 2b0005c0 2b000603 Xeon Scalable Gen4
      SPR-SP E5/S3 06-8f-08/87 2b0005c0 2b000603 Xeon Scalable Gen4
      New Disclosures Updated in Prior Releases:
      Processor Stepping F-M-S/PI Old Ver New Ver Products
      :--------------- :--------- :------------ :--------- :--------- :---------
      ICL-D B0 06-6c-01/10 010002b0 N/A Xeon D-17xx/D-18xx, D-27xx/D-28xx
      ICX-SP Dx/M1 06-6a-06/87 0d0003e7 N/A Xeon Scalable Gen3

  • Intel CPU Microcode was updated to the 20241029 release Update for functional issues. Updated Platforms:

    Processor Stepping F-M-S/PI Old Ver New Ver Products
    RPL-E/HX/S B0 06-b7-01/32 00000129 0000012b Core Gen13/Gen14
References

Affected packages

openSUSE:Leap 15.5
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/opensuse/ucode-intel&distro=openSUSE%20Leap%2015.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
openSUSE:Leap 15.6
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/opensuse/ucode-intel&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
openSUSE:Leap Micro 5.5
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/opensuse/ucode-intel&distro=openSUSE%20Leap%20Micro%205.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Enterprise Storage 7.1
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Enterprise%20Storage%207.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise Micro 5.1
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise Micro 5.2
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise Micro 5.3
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise Micro 5.4
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise Micro 5.5
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise Module for Basesystem 15 SP5
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise Module for Basesystem 15 SP6
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise Server 15 SP2-LTSS
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise Server 15 SP3-LTSS
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise Server 15 SP4-LTSS
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Manager Proxy 4.3
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Manager%20Proxy%204.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"
SUSE:Manager Server 4.3
ucode-intel

Package

Name
ucode-intel
Purl
pkg:rpm/suse/ucode-intel&distro=SUSE%20Manager%20Server%204.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20241112-150200.50.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ucode-intel":  "20241112-150200.50.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4053-1.json"