[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249966

 
 

909

 
 

195636

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2024:0917-1 -- SLES ucode-intel

ID: oval:org.secpod.oval:def:89051687Date: (C)2024-04-26   (M)2024-04-26
Class: PATCHFamily: unix




This update for ucode-intel fixes the following issues: * Updated to Intel CPU Microcode 20240312 release. * CVE-2023-39368: Protection mechanism failure of bus lock regulator for some Intel Processors may allow an unauthenticated user to potentially enable denial of service via network access * CVE-2023-38575: Non-transparent sharing of return predictor targets between contexts in some Intel Processors may allow an authorized user to potentially enable information disclosure via local access. * CVE-2023-28746: Information exposure through microarchitectural state after transient execution from some register files for some Intel Atom Processors may allow an authenticated user to potentially enable information disclosure via local access. * CVE-2023-22655 Protection mechanism failure in some 3rd and 4th Generation Intel Xeon Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access. * CVE-2023-43490: Incorrect calculation in microcode keying mechanism for some Intel Xeon D Processors with Intel SGX may allow a privileged user to potentially enable information disclosure via local access.

Platform:
SUSE Linux Enterprise Server 12 SP5
Product:
ucode-intel
Reference:
SUSE-SU-2024:0917-1
CVE-2023-22655
CVE-2023-28746
CVE-2023-38575
CVE-2023-39368
CVE-2023-43490
CVE    5
CVE-2023-43490
CVE-2023-39368
CVE-2023-38575
CVE-2023-22655
...
CPE    2
cpe:/a:microcode:ucode-intel
cpe:/o:suse:suse_linux_enterprise_server:12:sp5

© SecPod Technologies