Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a     privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24980)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a
    privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24980)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-67a38b081a advisory.

    - Update to upstream 2.1-44. 20240813
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision 0x5003605 up to 0x5003707;
      - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802 up to 0x7002904;
      - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1 up to 0xd0003e7;
      - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290 up to 0x10002b0;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4 up to 0xc6;
      - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision 0xb6 up to 0xb8;
      - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up to 0x38;
      - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up to 0x52;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode from revision 0xfa up to     0xfc;
      - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up to 0x1a;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xf6 up to 0xf8;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision 0xf6 up to 0xf8;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision 0xfc up to 0x100;
      - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up to 0xfc;
      - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa up to 0xfc;
      - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa up to 0xfc;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa up to 0xfe;
      - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision 0xfa up to 0xfc;
      - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up to 0x62;
      - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c up to 0x1e.
    - Addresses CVE-2024-24853, CVE-2024-24980, CVE-2024-25939

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of microcode_ctl installed on the remote host is prior to 2.1-47. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2682 advisory.

    2024-12-05: CVE-2024-21853 was added to this advisory.

    2024-12-05: CVE-2024-21820 was added to this advisory.

    2024-12-05: CVE-2024-23918 was added to this advisory.

    Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when     using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-21820)

    Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R)     Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access.
    (CVE-2024-21853)

    Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using     Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    (CVE-2024-23918)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-23984)

    Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some     Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-24853)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-24968)

    Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a     privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24980)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of microcode_ctl installed on the remote host is prior to 2.1-47.44. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1950 advisory.

    2024-12-05: CVE-2024-21820 was added to this advisory.

    2024-12-05: CVE-2024-23918 was added to this advisory.

    Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when     using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-21820)

    Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using     Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    (CVE-2024-23918)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-23984)

    Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some     Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-24853)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-24968)

    Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a     privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24980)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-748 advisory.

    2024-12-05: CVE-2024-21820 was added to this advisory.

    2024-12-05: CVE-2024-21853 was added to this advisory.

    2024-12-05: CVE-2024-23918 was added to this advisory.

    Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when     using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-21820)

    Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R)     Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access.
    (CVE-2024-21853)

    Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using     Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    (CVE-2024-23918)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-23984)

    Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some     Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-24853)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-24968)

    Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a     privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24980)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the microcode_ctl-20240910-1.el9 build changelog.

  - Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2024-23984)

  - Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some     Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-24853)

  - Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an     privileged user to potentially enable a denial of service via local access. (CVE-2024-24968)

  - Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a     privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24980)

  - Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a     privileged user to potentially enable denial of service via local access. (CVE-2024-25939)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3095-1 advisory.

    - Intel CPU Microcode was updated to the 20240813 release (bsc#1229129)
      - CVE-2024-24853: Security updates for [INTEL-     SA-01083](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html)
      - CVE-2024-25939: Security updates for [INTEL-     SA-01118](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html)
      - CVE-2024-24980: Security updates for [INTEL-     SA-01100](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html)
      - CVE-2023-42667: Security updates for [INTEL-     SA-01038](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html)
      - CVE-2023-49141: Security updates for [INTEL-     SA-01046](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html)       Other issues fixed:
      - Update for functional issues. Refer to [Intel Core Ultra     Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.
      - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family     Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
      - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
      - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family     Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details
      - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
      - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update     ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
      - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
      - Update for functional issues. Refer to [12th Generation Intel Core Processor     Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
      - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
      - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
      - Update for functional issues. Refer to [10th Generation Intel Core Processor Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
      - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec     Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
      - Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
      - Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
      - Update for functional issues. Refer to [Intel Processors and Intel Core i3     N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
      - Update for functional issues. Refer to [Intel Atom x6000E Series, and Intel Pentium and Celeron N and     J Series Processors for Internet of Things (IoT)     Applications](https://cdrdv2.intel.com/v1/dl/getContent/636674) for details.
     Updated Platforms:
      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | AML-Y22        | H0       | 06-8e-09/10 | 000000f4 | 000000f6 | Core Gen8 Mobile       | AML-Y42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile       | CFL-H          | R0       | 06-9e-0d/22 | 000000fc | 00000100 | Core Gen9 Mobile       | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9       | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f6 | 000000f8 | Core Gen8 Desktop, Mobile, Xeon E       | CFL-S          | B0       | 06-9e-0b/02 | 000000f4 | 000000f6 | Core Gen8       | CFL-S          | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9 Desktop       | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f4 | 000000f6 | Core Gen8 Mobile       | CLX-SP         | B1       | 06-55-07/bf | 05003605 | 05003707 | Xeon Scalable Gen2       | CML-H          | R1       | 06-a5-02/20 | 000000fa | 000000fc | Core Gen10 Mobile       | CML-S102       | Q0       | 06-a5-05/22 | 000000fa | 000000fc | Core Gen10       | CML-S62        | G1       | 06-a5-03/22 | 000000fa | 000000fc | Core Gen10       | CML-U42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile       | CML-U62 V1     | A0       | 06-a6-00/80 | 000000fa | 000000fe | Core Gen10 Mobile       | CML-U62 V2     | K1       | 06-a6-01/80 | 000000fa | 000000fc | Core Gen10 Mobile       | CML-Y42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile       | CPX-SP         | A1       | 06-55-0b/bf | 07002802 | 07002904 | Xeon Scalable Gen3       | EHL            | B1       | 06-96-01/01 | 00000019 | 0000001a | Pentium J6426/N6415, Celeron     J6412/J6413/N6210/N6211, Atom x6000E       | ICL-D          | B0       | 06-6c-01/10 | 01000290 | 010002b0 | Xeon D-17xx, D-27xx       | ICL-U/Y        | D1       | 06-7e-05/80 | 000000c4 | 000000c6 | Core Gen10 Mobile       | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003d1 | 0d0003e7 | Xeon Scalable Gen3       | KBL-R U        | Y0       | 06-8e-0a/c0 | 000000f4 | 000000f6 | Core Gen8 Mobile       | KBL-U23e       | J1       | 06-8e-09/c0 | 000000f4 | 000000f6 | Core Gen7 Mobile       | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000f4 | 000000f6 | Core Gen7 Mobile       | MTL            | C-0      | 06-aa-04/e6 | 0000001c | 0000001e | Core Ultra Processor       | RKL-S          | B0       | 06-a7-01/02 | 0000005e | 00000062 | Core Gen11       | TGL            | B0/B1    | 06-8c-01/80 | 000000b6 | 000000b8 | Core Gen11 Mobile       | TGL-H          | R0       | 06-8d-01/c2 | 00000050 | 00000052 | Core Gen11 Mobile       | TGL-R          | C0       | 06-8c-02/c2 | 00000036 | 00000038 | Core Gen11 Mobile       | WHL-U          | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen8 Mobile       | WHL-U          | W0       | 06-8e-0b/d0 | 000000f4 | 000000f6 | Core Gen8 Mobile

    - update to 20240531:
      * Update for functional issues. Refer to Intel Pentium Silver         and Intel Celeron Processor Specification Update
      - Updated Platforms:
        | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products         |:---------------|:---------|:------------|:---------|:---------|:---------         | GLK            | B0       | 06-7a-01/01 | 00000040 | 00000042 | Pentium Silver N/J5xxx, Celeron     N/J4xxx

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-dca1b54441 advisory.

    - Update to upstream 2.1-44. 20240813
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision 0x5003605 up to 0x5003707;
      - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802 up to 0x7002904;
      - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1 up to 0xd0003e7;
      - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290 up to 0x10002b0;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4 up to 0xc6;
      - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision 0xb6 up to 0xb8;
      - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up to 0x38;
      - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up to 0x52;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode from revision 0xfa up to     0xfc;
      - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up to 0x1a;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xf6 up to 0xf8;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision 0xf6 up to 0xf8;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision 0xfc up to 0x100;
      - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up to 0xfc;
      - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa up to 0xfc;
      - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa up to 0xfc;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa up to 0xfe;
      - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision 0xfa up to 0xfc;
      - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up to 0x62;
      - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c up to 0x1e.
    - Addresses CVE-2024-24853, CVE-2024-24980, CVE-2024-25939

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5c5c384fa7 advisory.

    - Update to upstream 2.1-44. 20240813
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision 0x5003605 up to 0x5003707;
      - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802 up to 0x7002904;
      - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1 up to 0xd0003e7;
      - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290 up to 0x10002b0;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4 up to 0xc6;
      - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision 0xb6 up to 0xb8;
      - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up to 0x38;
      - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up to 0x52;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode from revision 0xfa up to     0xfc;
      - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up to 0x1a;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xf6 up to 0xf8;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf4 up to 0xf6;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision 0xf6 up to 0xf8;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision 0xfc up to 0x100;
      - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up to 0xfc;
      - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa up to 0xfc;
      - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa up to 0xfc;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa up to 0xfe;
      - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision 0xfa up to 0xfc;
      - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up to 0x62;
      - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c up to 0x1e.
    - Addresses CVE-2024-24853, CVE-2024-24980, CVE-2024-25939

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6967-1 advisory.

    It was discovered that some Intel Core Ultra Processors did not properly isolate the stream cache. A     local authenticated user could potentially use this to escalate their privileges. (CVE-2023-42667)

    It was discovered that some Intel Processors did not properly isolate the stream cache. A local     authenticated user could potentially use this to escalate their privileges. (CVE-2023-49141)

    It was discovered that some Intel Processors did not correctly transition between the executive monitor     and SMI transfer monitor (STM). A privileged local attacker could use this to escalate their privileges.
    (CVE-2024-24853)

    It was discovered that some 3rd, 4th, and 5th Generation Intel Xeon Processors failed to properly     implement a protection mechanism. A local attacker could use this to potentially escalate their     privileges. (CVE-2024-24980)

    It was discovered that some 3rd Generation Intel Xeon Scalable Processors did not properly handle mirrored     regions with different values. A privileged local user could use this to cause a denial of service (system     crash). (CVE-2024-25939)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2941-1 advisory.

    - Intel CPU Microcode was updated to the 20240813 release (bsc#1229129)
      - CVE-2024-24853: Security updates for [INTEL-     SA-01083](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html)
      - CVE-2024-25939: Security updates for [INTEL-     SA-01118](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html)
      - CVE-2024-24980: Security updates for [INTEL-     SA-01100](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html)
      - CVE-2023-42667: Security updates for [INTEL-     SA-01038](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html)
      - CVE-2023-49141: Security updates for [INTEL-     SA-01046](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html)       Other issues fixed:
      - Update for functional issues. Refer to [Intel Core Ultra     Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.
      - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family     Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
      - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
      - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family     Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details
      - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
      - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update     ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
      - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
      - Update for functional issues. Refer to [12th Generation Intel Core Processor     Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
      - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
      - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
      - Update for functional issues. Refer to [10th Generation Intel Core Processor Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
      - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec     Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
      - Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
      - Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
      - Update for functional issues. Refer to [Intel Processors and Intel Core i3     N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
      - Update for functional issues. Refer to [Intel Atom x6000E Series, and Intel Pentium and Celeron N and     J Series Processors for Internet of Things (IoT)     Applications](https://cdrdv2.intel.com/v1/dl/getContent/636674) for details.
     Updated Platforms:
      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | AML-Y22        | H0       | 06-8e-09/10 | 000000f4 | 000000f6 | Core Gen8 Mobile       | AML-Y42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile       | CFL-H          | R0       | 06-9e-0d/22 | 000000fc | 00000100 | Core Gen9 Mobile       | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9       | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f6 | 000000f8 | Core Gen8 Desktop, Mobile, Xeon E       | CFL-S          | B0       | 06-9e-0b/02 | 000000f4 | 000000f6 | Core Gen8       | CFL-S          | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9 Desktop       | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f4 | 000000f6 | Core Gen8 Mobile       | CLX-SP         | B1       | 06-55-07/bf | 05003605 | 05003707 | Xeon Scalable Gen2       | CML-H          | R1       | 06-a5-02/20 | 000000fa | 000000fc | Core Gen10 Mobile       | CML-S102       | Q0       | 06-a5-05/22 | 000000fa | 000000fc | Core Gen10       | CML-S62        | G1       | 06-a5-03/22 | 000000fa | 000000fc | Core Gen10       | CML-U42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile       | CML-U62 V1     | A0       | 06-a6-00/80 | 000000fa | 000000fe | Core Gen10 Mobile       | CML-U62 V2     | K1       | 06-a6-01/80 | 000000fa | 000000fc | Core Gen10 Mobile       | CML-Y42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile       | CPX-SP         | A1       | 06-55-0b/bf | 07002802 | 07002904 | Xeon Scalable Gen3       | EHL            | B1       | 06-96-01/01 | 00000019 | 0000001a | Pentium J6426/N6415, Celeron     J6412/J6413/N6210/N6211, Atom x6000E       | ICL-D          | B0       | 06-6c-01/10 | 01000290 | 010002b0 | Xeon D-17xx, D-27xx       | ICL-U/Y        | D1       | 06-7e-05/80 | 000000c4 | 000000c6 | Core Gen10 Mobile       | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003d1 | 0d0003e7 | Xeon Scalable Gen3       | KBL-R U        | Y0       | 06-8e-0a/c0 | 000000f4 | 000000f6 | Core Gen8 Mobile       | KBL-U23e       | J1       | 06-8e-09/c0 | 000000f4 | 000000f6 | Core Gen7 Mobile       | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000f4 | 000000f6 | Core Gen7 Mobile       | MTL            | C-0      | 06-aa-04/e6 | 0000001c | 0000001e | Core Ultra Processor       | RKL-S          | B0       | 06-a7-01/02 | 0000005e | 00000062 | Core Gen11       | TGL            | B0/B1    | 06-8c-01/80 | 000000b6 | 000000b8 | Core Gen11 Mobile       | TGL-H          | R0       | 06-8d-01/c2 | 00000050 | 00000052 | Core Gen11 Mobile       | TGL-R          | C0       | 06-8c-02/c2 | 00000036 | 00000038 | Core Gen11 Mobile       | WHL-U          | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen8 Mobile       | WHL-U          | W0       | 06-8e-0b/d0 | 000000f4 | 000000f6 | Core Gen8 Mobile

    - update to 20240531:
      * Update for functional issues. Refer to Intel Pentium Silver         and Intel Celeron Processor Specification Update
      - Updated Platforms:
        | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products         |:---------------|:---------|:------------|:---------|:---------|:---------         | GLK            | B0       | 06-7a-01/01 | 00000040 | 00000042 | Pentium Silver N/J5xxx, Celeron     N/J4xxx

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Information exposure through microarchitectural state after transient execution from some register files
    for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information
    disclosure via local access. (CVE-2023-28746)

  - Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using
    Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via
    local access. (CVE-2023-22655)

  - Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow
    an authorized user to potentially enable information disclosure via local access. (CVE-2023-38575)

  - Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an
    unauthenticated user to potentially enable denial of service via network access. (CVE-2023-39368)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9d8e9952-5a42-11ef-a219-1c697a616631 advisory.

    Intel reports:

              A potential security vulnerability in SMI Transfer monitor (STM) may               allow escalation of privilege.  Intel has released microcode updates               to mitigate this potential vulnerability.


              A potential security vulnerability in some 3rd Generation Intel Xeon               Scalable Processors may allow denial of service.  Intel has released               microcode updates to mitigate this potential vulnerability.


              A potential security vulnerability in some 3rd, 4th, and 5th               Generation Intel Xeon Processors may allow escalation of privilege.
              Intel has released firmware updates to mitigate this potential               vulnerability.


              A potential security vulnerability in the Intel Core Ultra Processor               stream cache mechanism may allow escalation of privilege.  Intel has               released microcode updates to mitigate this potential vulnerability.


              A potential security vulnerability in some Intel Processor stream               cache mechanisms may allow escalation of privilege.  Intel has               released microcode updates to mitigate this potential vulnerability.


Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
262043	Linux Distros Unpatched Vulnerability : CVE-2024-24980	Nessus	Misc.	medium
427975	Bottlerocket: microcode: security update to 2.5.0	Tenable Cloud Security	Bottlerocket Local Security Checks	medium
427975	Bottlerocket: microcode: security update to 2.5.0	Tenable Self-Hosted Container Security	Bottlerocket Local Security Checks	medium
211125	Fedora 41 : microcode_ctl (2024-67a38b081a)	Nessus	Fedora Local Security Checks	high
210076	Amazon Linux 2 : microcode_ctl (ALAS-2024-2682)	Nessus	Amazon Linux Local Security Checks	high
210017	Amazon Linux AMI : microcode_ctl (ALAS-2024-1950)	Nessus	Amazon Linux Local Security Checks	high
209998	Amazon Linux 2023 : microcode_ctl (ALAS2023-2024-748)	Nessus	Amazon Linux Local Security Checks	high
207917	CentOS 9 : microcode_ctl-20240910-1.el9	Nessus	CentOS Local Security Checks	high
206578	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ucode-intel (SUSE-SU-2024:3095-1)	Nessus	SuSE Local Security Checks	high
206415	Fedora 39 : microcode_ctl (2024-dca1b54441)	Nessus	Fedora Local Security Checks	medium
206411	Fedora 40 : microcode_ctl (2024-5c5c384fa7)	Nessus	Fedora Local Security Checks	medium
205778	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Intel Microcode vulnerabilities (USN-6967-1)	Nessus	Ubuntu Local Security Checks	high
205736	SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2024:2941-1)	Nessus	SuSE Local Security Checks	high
408483	Alpine: intel-ucode: security update to 20240813-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
408483	Alpine: intel-ucode: security update to 20240813-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
205541	FreeBSD : Intel CPUs -- multiple vulnerabilities (9d8e9952-5a42-11ef-a219-1c697a616631)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2024-24980

medium

Tenable Plugins

medium

medium

medium

high

high

high

high

high

high

medium

medium

high

high

high

high

high