Alerts This Week
Warning Icon 1 684
Alerts This Week
Warning Icon 1 684

Mageia 9: 2024-0103 Critical: Intel Microcode Escalation Risks

mageia
Calendar Grey March 31, 2024
Dist Mageia Esm H88
Recent security patches from Intel for Mageia tackle severe vulnerabilities impacting a range of processors, bolstering overall system protection.
Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable es...

Summary

Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access. (CVE-2023-22655) Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. (CVE-2023-28746) Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. (CVE-2023-38575) Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable denial of service via network access. (CVE-2023-39368) Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX ...

References

- https://bugs.mageia.org/show_bug.cgi?id=33015

-

- https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240312

- https://www.cve.org/CVERecord?id=CVE-2023-22655

- https://www.cve.org/CVERecord?id=CVE-2023-28746

- https://www.cve.org/CVERecord?id=CVE-2023-38575

- https://www.cve.org/CVERecord?id=CVE-2023-39368

- https://www.cve.org/CVERecord?id=CVE-2023-43490

Resolution

SRPMS

- 9/nonfree/microcode-0.20240312-1.mga9.nonfree

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 31 Mar 2024
URL: https://advisories.mageia.org/MGASA-2024-0103.html
Type: security
CVE: CVE-2023-22655, CVE-2023-28746, CVE-2023-38575, CVE-2023-39368, CVE-2023-43490

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here