Debian 11 DLA-4170-1 critical: intel-microcode update for vulnerabilities
debian lts
May 18, 2025
Microcode updates has been released for Intel(R) processors, addressing multiple potential vulnerabilties that may allow denial of service or information disclosure
Topics Covered
Summary
CVE-2024-28956
Exposure of Sensitive Information in Shared Microarchitectural
Structures during Transient Execution for some Intel(R) Processors
may allow an authenticated user to potentially enable information
disclosure via local access.
CVE-2024-43420
Exposure of sensitive information caused by shared
microarchitectural predictor state that influences transient
execution for some Intel Atom(R) processors may allow an
authenticated user to potentially enable information disclosure via
local access.
CVE-2024-45332
Exposure of sensitive information caused by shared
microarchitectural predictor state that influences transient
execution in the indirect branch predictors for some Intel(R)
Processors may allow an authenticated user to potentially enable
information disclosure via local access.
CVE-2025-20012
Incorrect behavior order for some Intel(R) Core⢠Ultra Processors
may allow an unauthenticated user to potentially enable information
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Package: intel-microcode
Version: 3.20250512.1~deb11u1
CVE ID: CVE-2024-28956 CVE-2024-43420 CVE-2024-45332 CVE-2025-20012
Debian Bug: 1105172
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!