USN-4182-4

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-4182-4

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4182-4.json

JSON Data

https://api.osv.dev/v1/vulns/USN-4182-4

Published

2019-12-04T05:45:20Z

Modified

2026-02-10T04:41:40Z

Summary

intel-microcode regression

Details

USN-4182-2 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family.

We apologize for the inconvenience.

Original advisory details:

Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions (TSX) could expose memory contents previously stored in microarchitectural buffers to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2019-11135)

It was discovered that certain Intel Xeon processors did not properly restrict access to a voltage modulation interface. A local privileged attacker could use this to cause a denial of service (system crash). (CVE-2019-11139)

References

Affected packages

Ubuntu:Pro:14.04:LTS / intel-microcode

Package

Name: intel-microcode
Purl: pkg:deb/ubuntu/intel-microcode@3.20191115.1ubuntu0.14.04.2?arch=source&distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.20191115.1ubuntu0.14.04.2

Affected versions

1.*

1.20130906.1ubuntu2

1.20130906.1ubuntu3

2.*

2.20140122.1

2.20140430.1ubuntu1

2.20140624-t-1ubuntu2

3.*

3.20180108.0~ubuntu14.04.2

3.20180108.0+really20170707ubuntu14.04.1

3.20180312.0~ubuntu14.04.1

3.20180425.1~ubuntu0.14.04.1

3.20180425.1~ubuntu0.14.04.2

3.20180807a.0ubuntu0.14.04.1

3.20190514.0ubuntu0.14.04.1

3.20190514.0ubuntu0.14.04.2

3.20190618.0ubuntu0.14.04.1

3.20191112-0ubuntu0.14.04.2

3.20191115.1ubuntu0.14.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "intel-microcode",
            "binary_version": "3.20191115.1ubuntu0.14.04.2"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Database specific

cves_map

{
    "cves": [],
    "ecosystem": "Ubuntu:Pro:14.04:LTS"
}

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4182-4.json"