Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Red Hat Enterprise Linux 7.6: RHSA-2021-3317 Moderate Microcode_Ctl Threat

red hat
Calendar Grey August 31, 2021
Dist Redhat Esm H88
Major enhancement for microcode_ctl on Red Hat focusing on urgent problems and moderate vulnerabilities. Resolutions provided.
An update for microcode_ctl is now available for Red Hat Enterprise Linux 7.6 Advanced Update Support

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Summary

* hw: Vector Register Data Sampling (CVE-2020-0548)
* hw: L1D Cache Eviction Sampling (CVE-2020-0549)
* hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)
* hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)
* hw: Vector Register Leakage-Active (CVE-2020-8696)
* hw: Fast forward store predictor (CVE-2020-8698)
* hw: vt-d related privilege escalation (CVE-2020-24489)
* hw: improper isolation of shared resources in some Intel Processors(CVE-2020-24511)
* hw: observable timing discrepancy in some Intel Processors(CVE-2020-24512)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Topics%20covered

Topics Covered

security advisory moderate security issue Red Hat kernel update microcode_ctl

References

https://access.redhat.com/security/cve/CVE-2020-0543 https://access.redhat.com/security/cve/CVE-2020-0548 https://access.redhat.com/security/cve/CVE-2020-0549 https://access.redhat.com/security/cve/CVE-2020-8695 https://access.redhat.com/security/cve/CVE-2020-8696 https://access.redhat.com/security/cve/CVE-2020-8698 https://access.redhat.com/security/cve/CVE-2020-24489 https://access.redhat.com/security/cve/CVE-2020-24511 https://access.redhat.com/security/cve/CVE-2020-24512 https://access.redhat.com/security/updates/classification/#important

Package List

Red Hat Enterprise Linux Server AUS (v. 7.6):
Source: microcode_ctl-2.1-47.23.el7_6.src.rpm
x86_64: microcode_ctl-2.1-47.23.el7_6.x86_64.rpm microcode_ctl-debuginfo-2.1-47.23.el7_6.x86_64.rpm
Red Hat Enterprise Linux Server E4S (v. 7.6):
Source: microcode_ctl-2.1-47.23.el7_6.src.rpm
x86_64: microcode_ctl-2.1-47.23.el7_6.x86_64.rpm microcode_ctl-debuginfo-2.1-47.23.el7_6.x86_64.rpm
Red Hat Enterprise Linux Server TUS (v. 7.6):
Source: microcode_ctl-2.1-47.23.el7_6.src.rpm
x86_64: microcode_ctl-2.1-47.23.el7_6.x86_64.rpm microcode_ctl-debuginfo-2.1-47.23.el7_6.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/


Advisory ID: RHSA-2021:3317-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2021:3317
Issue date: 2021-08-31

Topic

An update for microcode_ctl is now available for Red Hat Enterprise Linux7.6 Advanced Update Support.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory moderate security issue Red Hat kernel update microcode_ctl

Relevant Releases Architectures

Red Hat Enterprise Linux Server AUS (v. 7.6) - x86_64

Red Hat Enterprise Linux Server E4S (v. 7.6) - x86_64

Red Hat Enterprise Linux Server TUS (v. 7.6) - x86_64

Bugs Fixed

1788786 - CVE-2020-0548 hw: Vector Register Data Sampling

1788788 - CVE-2020-0549 hw: L1D Cache Eviction Sampling

1827165 - CVE-2020-0543 hw: Special Register Buffer Data Sampling (SRBDS)

1828583 - CVE-2020-8695 hw: Information disclosure issue in Intel SGX via RAPL interface

1890355 - CVE-2020-8696 hw: Vector Register Leakage-Active

1890356 - CVE-2020-8698 hw: Fast forward store predictor

1962650 - CVE-2020-24489 hw: vt-d related privilege escalation

1962702 - CVE-2020-24511 hw: improper isolation of shared resources in some Intel Processors1962722 - CVE-2020-24512 hw: observable timing discrepancy in some Intel Processors1972333 - [rhel-7.6.z] Re-enable 06-5e-03 (SKL-H/S, CPUID 0x506e3) latest microcode updates

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here