Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Mageia 9: MGASA-2025-0068 critical: Intel Microcode Denial of Service

mageia
Calendar Grey February 17, 2025
Dist Mageia Esm H88
MGASA-2025-0072 addresses vulnerabilities in AMD chipsets through updated firmware packages.
Improper Finite State Machines (FSMs) in Hardware Logic for some Intel® Processors may allow privileged user to potentially enable denial of service via local access

Summary

Improper Finite State Machines (FSMs) in Hardware Logic for some Intel® Processors may allow privileged user to potentially enable denial of service via local access. (CVE-2024-31068) Improper access control in the EDECCSSA user leaf function for some Intel® Processors with Intel® SGX may allow an authenticated user to potentially enable denial of service via local access. (CVE-2024-36293) Improper input validation in UEFI firmware for some Intel® processors may allow a privileged user to potentially enable escalation of privilege via local access. (CVE-2023-43758) Improper handling of physical or environmental conditions in some Intel® Processors may allow an authenticated user to enable denial of service via local access. (CVE-2024-39355) Sequence of processor instructions leads to unexpected behavior in the Intel® DSA V1.0 for some Intel® Xeon® Processors may allow an authenticated user to potentially enable denial of service via local access. (CVE-2024-37020)

References

- https://bugs.mageia.org/show_bug.cgi?id=34020

- https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250211

- https://www.cve.org/CVERecord?id=CVE-2024-31068

- https://www.cve.org/CVERecord?id=CVE-2024-36293

- https://www.cve.org/CVERecord?id=CVE-2023-43758

- https://www.cve.org/CVERecord?id=CVE-2024-39355

- https://www.cve.org/CVERecord?id=CVE-2024-37020

Resolution

SRPMS

- 9/nonfree/microcode-0.20250211-1.mga9.nonfree

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 17 Feb 2025
URL: https://advisories.mageia.org/MGASA-2025-0068.html
Type: security
CVE: CVE-2024-31068, CVE-2024-36293, CVE-2023-43758, CVE-2024-39355, CVE-2024-37020

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here