The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d20a106350 advisory.

    - Update to upstream 2.1-47. 20241112
      - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in         intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0         up to 0x2b000603;
      - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in         intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in         intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in         intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in         intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in         intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0         up to 0x2b000603;
      - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in         intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in         intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in         intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in         intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in         intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision         0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in         intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in         intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in         intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in         intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in         intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision         0x2b0005c0 up to 0x2b000603;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision         0x36 up to 0x37;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-97-02) from revision 0x36 up to 0x37;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)         from revision 0x36 up to 0x37;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)         from revision 0x36 up to 0x37;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-97-05) from revision 0x36 up to 0x37;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36         up to 0x37;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)         from revision 0x36 up to 0x37;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)         from revision 0x36 up to 0x37;
      - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision         0x434 up to 0x435;
      - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in         intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
      - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in         intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
      - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434         up to 0x435;
      - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f         up to 0x20;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision         0x4122 up to 0x4123;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in         intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
      - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from         revision 0x4122 up to 0x4123;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in         intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122         up to 0x4123;
      - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from         revision 0x4122 up to 0x4123;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in         intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in         intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
      - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
      - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up         to 0x37;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)         from revision 0x36 up to 0x37;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)         from revision 0x36 up to 0x37;
      - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up         to 0x37;
      - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230         up to 0x21000283;
      - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in         intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
      - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in         intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
      - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230         up to 0x21000283.
    - Addresses CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984

    ----

    - Update to upstream 2.1-46. 20241029
      - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up         to 0x12b.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of microcode_ctl installed on the remote host is prior to 2.1-47. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2682 advisory.

    2024-12-05: CVE-2024-21853 was added to this advisory.

    2024-12-05: CVE-2024-21820 was added to this advisory.

    2024-12-05: CVE-2024-23918 was added to this advisory.

    Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when     using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-21820)

    Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R)     Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access.
    (CVE-2024-21853)

    Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using     Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    (CVE-2024-23918)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-23984)

    Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some     Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-24853)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-24968)

    Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a     privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24980)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4053-1 advisory.

    - Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)
      - CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th     Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via     local access.
      - CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller     configurations when using Intel SGX may allow a privileged user to potentially enable escalation of     privilege via local access.
      - CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller     configurations when using Intel SGX may allow a privileged user to potentially enable escalation of     privilege via local access.
      - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may     allow an privileged user to potentially enable a denial of service via local access.
      - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a     privileged user to potentially enable information disclosure via local access.
      - Update for functional issues.
      New Platforms:
      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       Updated Platforms:
      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | ADL            | C0       | 06-97-02/07 | 00000036 | 00000037 | Core Gen12       | ADL            | H0       | 06-97-05/07 | 00000036 | 00000037 | Core Gen12       | ADL            | L0       | 06-9a-03/80 | 00000434 | 00000435 | Core Gen12       | ADL            | R0       | 06-9a-04/80 | 00000434 | 00000435 | Core Gen12       | EMR-SP         | A0       | 06-cf-01/87 | 21000230 | 21000283 | Xeon Scalable Gen5       | EMR-SP         | A1       | 06-cf-02/87 | 21000230 | 21000283 | Xeon Scalable Gen5       | MTL            | C0       | 06-aa-04/e6 | 0000001f | 00000020 | Core Ultra Processor       | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004122 | 00004123 | Core Gen13       | RPL-HX/S       | C0       | 06-bf-02/07 | 00000036 | 00000037 | Core Gen13/Gen14       | RPL-S          | H0       | 06-bf-05/07 | 00000036 | 00000037 | Core Gen13/Gen14       | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004122 | 00004123 | Core Gen13       | SPR-SP         | E3       | 06-8f-06/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4       | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4       | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4       New Disclosures Updated in Prior Releases:
      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | ICL-D          | B0       | 06-6c-01/10 | 010002b0 | N/A      | Xeon D-17xx/D-18xx, D-27xx/D-28xx       | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003e7 | N/A      | Xeon Scalable Gen3

    - Intel CPU Microcode was updated to the 20241029 release       Update for functional issues.
      Updated Platforms:
      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | RPL-E/HX/S     | B0       | 06-b7-01/32 | 00000129 | 0000012b | Core Gen13/Gen14

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3307-1 advisory.

    - Intel CPU Microcode was updated to the 20240910 release (bsc#1230400)
    - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a     privileged user to potentially enable information disclosure via local access.
    - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may     allow an privileged user to potentially enable a denial of service via local access.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3332-1 advisory.

    - Intel CPU Microcode was updated to the 20240910 release (bsc#1230400)
    - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a     privileged user to potentially enable information disclosure via local access.
    - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may     allow an privileged user to potentially enable a denial of service via local access.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4002 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4002-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Tobias Frost     December 23, 2024                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : intel-microcode     Version        : 3.20241112.1~deb11u1     CVE ID         : CVE-2024-23918 CVE-2024-21853 CVE-2024-21820 CVE-2024-23984     Debian Bug     : 1087532

    A microcode update has been released for Intel processors, addressing multiple     vulnerabilties which potentially could cause local privileged escalation or     local DoS.

    CVE-2024-23918

        Improper conditions check in some Intel(R) Xeon(R) processor memory controller         configurations when using Intel(R) SGX may allow a privileged user to         potentially enable escalation of privilege via local access. (INTEL-SA-01079)

    CVE-2024-21853

        Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th         Generation Intel(R) Xeon(R) Processors may allow an authorized user to         potentially enable denial of service via local access. (INTEL-SA-01101)

    CVE-2024-21820

        Incorrect default permissions in some Intel(R) Xeon(R) processor memory         controller configurations when using Intel(R) SGX may allow a privileged user         to potentially enable escalation of privilege via local access.
        (INTEL-SA-01079)

    CVE-2024-23984 (already adressed in a previous upload, this upload adds more processor models.)

        Observable discrepancy in RAPL interface for some Intel(R) Processors may allow         a privileged user to potentially enable information disclosure via local         access.



    For Debian 11 bullseye, this problem has been fixed in version     3.20241112.1~deb11u1.

    We recommend that you upgrade your intel-microcode packages.

    For the detailed security status of intel-microcode please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/intel-microcode

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the microcode_ctl-20241112-1.el9 build changelog.

  - Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using     Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    (CVE-2024-23918)

  - Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when     using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-21820)

  - Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R)     Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access.
    (CVE-2024-21853)

  - Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2024-23984)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7149-1 advisory.

    Avraham Shalev and Nagaraju N Kodalapura discovered that some Intel(R) Xeon(R) processors did not properly     restrict access to the memory controller when using Intel(R) SGX. This may allow a local privileged     attacker to further escalate their privileges. (CVE-2024-21820, CVE-2024-23918)

    It was discovered that some 4th and 5th Generation Intel(R) Xeon(R) Processors did not properly implement     finite state machines (FSMs) in hardware logic. THis may allow a local privileged attacker to cause a     denial of service (system crash). (CVE-2024-21853)

    It was discovered that some Intel(R) Processors did not properly restrict access to the Running Average     Power Limit (RAPL) interface. This may allow a local privileged attacker to obtain sensitive information.
    (CVE-2024-23984)

    It was discovered that some Intel(R) Processors did not properly implement finite state machines (FSMs) in     hardware logic. This may allow a local privileged attacker to cause a denial of service (system crash).
    (CVE-2024-24968)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-748 advisory.

    2024-12-05: CVE-2024-21820 was added to this advisory.

    2024-12-05: CVE-2024-21853 was added to this advisory.

    2024-12-05: CVE-2024-23918 was added to this advisory.

    Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when     using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-21820)

    Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R)     Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access.
    (CVE-2024-21853)

    Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using     Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    (CVE-2024-23918)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-23984)

    Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some     Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-24853)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-24968)

    Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a     privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24980)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of microcode_ctl installed on the remote host is prior to 2.1-47.44. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1950 advisory.

    2024-12-05: CVE-2024-21820 was added to this advisory.

    2024-12-05: CVE-2024-23918 was added to this advisory.

    Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when     using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-21820)

    Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using     Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.
    (CVE-2024-23918)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-23984)

    Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some     Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-24853)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-24968)

    Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a     privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24980)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e6b5e38ae6 advisory.

    - Update to upstream 2.1-45. 20240910
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision         0x35 up to 0x36;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-97-02) from revision 0x35 up to 0x36;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)         from revision 0x35 up to 0x36;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)         from revision 0x35 up to 0x36;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-97-05) from revision 0x35 up to 0x36;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35         up to 0x36;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)         from revision 0x35 up to 0x36;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)         from revision 0x35 up to 0x36;
      - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision         0x433 up to 0x434;
      - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in         intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
      - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in         intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
      - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433         up to 0x434;
      - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1e         up to 0x1f;
      - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up         to 0x129;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision         0x4121 up to 0x4122;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in         intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
      - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from         revision 0x4121 up to 0x4122;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in         intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121         up to 0x4122;
      - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from         revision 0x4121 up to 0x4122;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in         intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in         intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
      - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
      - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up         to 0x36;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)         from revision 0x35 up to 0x36;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)         from revision 0x35 up to 0x36;
      - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up         to 0x36;
      - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up         to 0x1a (old pf 0x11).
    - Addresses CVE-2024-23984, CVE-2024-24968
    - Added the documentation directory to the list of files owned by the package


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
211714	Fedora 40 : microcode_ctl (2024-d20a106350)	Nessus	Fedora Local Security Checks	2024/11/22	2024/11/22	high
210076	Amazon Linux 2 : microcode_ctl (ALAS-2024-2682)	Nessus	Amazon Linux Local Security Checks	2024/11/1	2024/12/11	high
212541	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ucode-intel (SUSE-SU-2024:4053-1)	Nessus	SuSE Local Security Checks	2024/12/12	2024/12/12	high
207422	SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2024:3307-1)	Nessus	SuSE Local Security Checks	2024/9/19	2024/9/19	medium
207502	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ucode-intel (SUSE-SU-2024:3332-1)	Nessus	SuSE Local Security Checks	2024/9/20	2024/9/20	medium
213374	Debian dla-4002 : intel-microcode - security update	Nessus	Debian Local Security Checks	2024/12/23	2024/12/23	high
213504	CentOS 9 : microcode_ctl-20241112-1.el9	Nessus	CentOS Local Security Checks	2025/1/6	2025/1/6	high
212270	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Intel Microcode vulnerabilities (USN-7149-1)	Nessus	Ubuntu Local Security Checks	2024/12/11	2024/12/11	high
209998	Amazon Linux 2023 : microcode_ctl (ALAS2023-2024-748)	Nessus	Amazon Linux Local Security Checks	2024/10/31	2024/12/11	high
210017	Amazon Linux AMI : microcode_ctl (ALAS-2024-1950)	Nessus	Amazon Linux Local Security Checks	2024/10/31	2024/12/11	high
207325	Fedora 40 : microcode_ctl (2024-e6b5e38ae6)	Nessus	Fedora Local Security Checks	2024/9/17	2024/9/17	medium

检测

插件搜索

high

high

high

medium

medium

high

high

high

high

high

medium