The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-3028 advisory.

    [2:2.1-73.11.0.1]
    - for Intel, do not trigger load if on-disk microcode is not an update [Orabug: 30634727]
    - set early_microcode='no' in virtualized guests to avoid early load bugs [Orabug: 30618736]
    - ensure late loading fixes are present on 4.1.12-* and 4.14.35-*
    - enable early and late load for 5.4.17-*
    - enable early loading for 06-4f-01 caveat
    - remove no longer appropriate caveats for 06-2d-07 and 06-55-04

    [2:2.1-73.11]
    - Update Intel CPU microcode to microcode-20210608 release:
      - Fixes in releasenote.md file.

    [2:2.1-73.10]
    - Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,       intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,       and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
    - Enable 06-8c-01 microcode update by default.
    - Enable 06-5e-03 microcode update by default (#1897684).

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3029 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3323 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5083 advisory.

    Security Fix(es):

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s)     listed in the References section.

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20201027 release, addresses:
      - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
      - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
      - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
      - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
      - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
      - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision         0xe0;
      - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in         intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in         intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up         to 0x2006a08;
      - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in         intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up         to 0xe0;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from         revision 0xd6 up to 0xde;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up         to 0xde;
      - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode         from revision 0x43 up to 0x44;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157         up to 0x1000159;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01         up to 0x4003003;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision         0x5002f01 up to 0x5003003;
      - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up         to 0x40;
      - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up         to 0x1e;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up         to 0x18;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78         up to 0xa0;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca         up to 0xe0.

    * Add README file to the documentation directory.

    * Add publicly-sourced codenames list to supply to gen_provides.sh; update the latter to handle the     somewhat different format.

    * Add SUMMARY.intel-ucode file containing metadata information from the microcode file headers.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-5084 advisory.

    - Update Intel CPU microcode to microcode-20201027 release, addresses       CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698       (#1893243, #1893238):
      - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode (in microcode.dat)         at revision 0x700001e;
      - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in         microcode.dat) at revision 0x68;
      - Addition of 06-a5-02/0x20 (CML-H R1) microcode (in microcode.dat)         at revision 0xe0;
      - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode (in microcode.dat)         at revision 0xe0;
      - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat)         at revision 0xe0;
      - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode (in         microcode.dat) at revision 0xe0;
      - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in         microcode-06-4e-03.dat) from revision 0xdc up to 0xe2;
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in         microcode-06-55-04.dat) from revision 0x2006906 up to 0x2006a08;
      - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in         microcode-06-5e-03.dat) from revision 0xdc up to 0xe2;
      - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode         (in microcode.dat) from revision 0x43 up to 0x44;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode (in microcode.dat)         from revision 0x1000157 up to 0x1000159;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode (in microcode.dat)         from revision 0x4002f01 up to 0x4003003;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode (in         microcode.dat) from revision 0x5002f01 up to 0x5003003;
      - Update of 06-5c-09/0x03 (APL D0) microcode (in microcode.dat) from         revision 0x38 up to 0x40;
      - Update of 06-5c-0a/0x03 (APL B1/F1) microcode (in microcode.dat)         from revision 0x16 up to 0x1e;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode (in microcode.dat)         from revision 0x16 up to 0x18;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode (in microcode.dat)         from revision 0x78 up to 0xa0;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in microcode.dat)         from revision 0xd6 up to 0xde;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in         microcode.dat) from revision 0xd6 up to 0xde;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in         microcode.dat) from revision 0xd6 up to 0xe0;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in microcode.dat)         from revision 0xd6 up to 0xde;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode (in microcode.dat) from revision 0xd6 up to 0xde;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in         microcode.dat) from revision 0xd6 up to 0xde;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in         microcode.dat) from revision 0xd6 up to 0xde;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in microcode.dat)         from revision 0xd6 up to 0xde;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in         microcode.dat) from revision 0xd6 up to 0xde;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in         microcode.dat) from revision 0xd6 up to 0xde;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode (in microcode.dat)         from revision 0xca up to 0xe0.

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - recognize the 'force-intel' file path available on EL7+     [orabug 31655792]

  - disable live load during %post due to UEK4 rendezvous     timeouts [orabug 31655792]

  - merge Oracle changes for early load via dracut

  - remove no longer appropriate caveats for 06-2d-07 and     06-55-04

  - remove other caveat support to be compatible with early     load logic

  - enable late load on install for UEK4 kernels marked safe     (except BDW-79)

  - set early_microcode='no' in virtualized guests to avoid     early load bugs [Orabug: 30618737]

  - Update Intel CPU microcode to microcode-20201027     release, addresses CVE-2020-8694, CVE-2020-8695,     CVE-2020-8696, (CVE-2020-8698) (#1893243, #1893238) :

  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode (in     microcode.dat) at revision 0x700001e 

  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in     microcode.dat) at revision 0x68 

  - Addition of 06-a5-02/0x20 (CML-H R1) microcode (in     microcode.dat) at revision 0xe0 

  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode (in     microcode.dat) at revision 0xe0 

  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode (in     microcode.dat) at revision 0xe0 

  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode     (in microcode.dat) at revision 0xe0 

  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode     (in microcode-06-4e-03.dat) from revision 0xdc up to     0xe2 

  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0)     microcode (in microcode-06-55-04.dat) from revision     0x2006906 up to 0x2006a08 

  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0)     microcode (in microcode-06-5e-03.dat) from revision 0xdc     up to 0xe2 

  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2)     microcode (in microcode.dat) from revision 0x43 up to     0x44 

  - Update of 06-55-03/0x97 (SKX-SP B1) microcode (in     microcode.dat) from revision 0x1000157 up to 0x1000159 

  - Update of 06-55-06/0xbf (CLX-SP B0) microcode (in     microcode.dat) from revision 0x4002f01 up to 0x4003003 

  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode (in     microcode.dat) from revision 0x5002f01 up to 0x5003003 

  - Update of 06-5c-09/0x03 (APL D0) microcode (in     microcode.dat) from revision 0x38 up to 0x40 

  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode (in     microcode.dat) from revision 0x16 up to 0x1e 

  - Update of 06-7a-08/0x01 (GLK-R R0) microcode (in     microcode.dat) from revision 0x16 up to 0x18 

  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode (in     microcode.dat) from revision 0x78 up to 0xa0 

  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in     microcode.dat) from revision 0xd6 up to 0xde 

  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode     (in microcode.dat) from revision 0xd6 up to 0xde 

  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0)     microcode (in microcode.dat) from revision 0xd6 up to     0xe0 

  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in     microcode.dat) from revision 0xd6 up to 0xde 

  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0,     WHL-U V0) microcode (in microcode.dat) from revision     0xd6 up to 0xde 

  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0)     microcode (in microcode.dat) from revision 0xd6 up to     0xde 

  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode     (in microcode.dat) from revision 0xd6 up to 0xde 

  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in     microcode.dat) from revision 0xd6 up to 0xde 

  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode     (in microcode.dat) from revision 0xd6 up to 0xde 

  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode     (in microcode.dat) from revision 0xd6 up to 0xde 

  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode (in     microcode.dat) from revision 0xca up to 0xe0.

  - Add README file to the documentation directory.

  - Add publicly-sourced codenames list to supply to     gen_provides.sh  update the latter to handle the     somewhat different format.

  - Add SUMMARY.intel-ucode file containing metadata     information from the microcode file headers.

The remote Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2021:3027 advisory.

  - Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-0543)

  - Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable     information disclosure via local access. (CVE-2020-0548)

  - Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user     to potentially enable information disclosure via local access. (CVE-2020-0549)

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511, CVE-2020-8698)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2020-8695)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5181 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    Bug Fix(es) and Enhancement(s):
    * Update Intel CPU microcode to microcode-20201112 release, addresses:
      - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
      - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
      - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
      - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
      - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
      - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
      - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision         0xe0;
      - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in         intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in         intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up         to 0x2006a08;
      - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in         intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up         to 0xe0;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from         revision 0xd6 up to 0xde;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up         to 0xde;
      - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode         from revision 0x43 up to 0x44;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157         up to 0x1000159;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01         up to 0x4003003;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision         0x5002f01 up to 0x5003003;
      - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up         to 0x40;
      - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up         to 0x1e;
      - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up         to 0x34;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up         to 0x18;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78         up to 0xa0;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca         up to 0xe0.
    * Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.
    * Add README file to the documentation directory.
    * Add publicly-sourced codenames list to supply to gen_provides.sh; update       the latter to handle the somewhat different format.
    * Add SUMMARY.intel-ucode file

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5185 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20201027 release, addresses:

      - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
      - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
      - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
      - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
      - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
      - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision         0xe0;
      - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in         intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in         intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up         to 0x2006a08;
      - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in         intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up         to 0xe0;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from         revision 0xd6 up to 0xde;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up         to 0xde;
      - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode         from revision 0x43 up to 0x44;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157         up to 0x1000159;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01         up to 0x4003003;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision         0x5002f01 up to 0x5003003;
      - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up         to 0x40;
      - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up         to 0x1e;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up         to 0x18;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78         up to 0xa0;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca         up to 0xe0.

    * Add README file to the documentation directory.

    * Add publicly-sourced codenames list to supply to gen_provides.sh; update       the latter to handle the somewhat different format.

    * Add SUMMARY.intel-ucode file containing metadata information from       the microcode file headers.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for ucode-intel fixes the following issues :

Updated Intel CPU Microcode to 20201110 official release.

  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)     INTEL-SA-00389 (bsc#1170446)

  - CVE-2020-8698: Fixed Fast Store Forward Predictor     INTEL-SA-00381 (bsc#1173594)

  - CVE-2020-8696: Vector Register Sampling Active     INTEL-SA-00381 (bsc#1173592)

Release notes :

  - Security updates for

[INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-cent er/ad visory/intel-sa-00381.html).

  - Security updates for

[INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-cent er/ad visory/intel-sa-00389.html).

  - Update for functional issues. Refer to [Second     Generation Intel&Acirc;&reg; Xeon&Acirc;&reg; Processor     Scalable Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/338848     ) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; Processor Scalable     Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/613537     ) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; Processor E5 v3     Product Family Specification

Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e 5-v3- spec-update.html?wapkw=processor+spec+update+e5) for details.

  - Update for functional issues. Refer to [10th Gen     Intel&Acirc;&reg; Core&acirc;&#132;&cent; Processor     Families Specification

Update](https://www.intel.com/content/www/us/en/products/docs/processo rs/co re/10th-gen-core-families-specification-update.html) for details.

  - Update for functional issues. Refer to [8th and 9th Gen     Intel&Acirc;&reg; Core&acirc;&#132;&cent; Processor     Family Spec

Update](https://www.intel.com/content/www/us/en/products/docs/processo rs/co re/8th-gen-core-spec-update.html) for details.

  - Update for functional issues. Refer to [7th Gen and 8th     Gen (U Quad-Core) Intel&Acirc;&reg; Processor Families     Specification

Update](https://www.intel.com/content/www/us/en/processors/core/7th-ge n-cor e-family-spec-update.html) for details.

  - Update for functional issues. Refer to [6th Gen     Intel&Acirc;&reg; Processor Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/332689     ) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; E3-1200 v6 Processor     Family Specification

Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e 3-120 0v6-spec-update.html) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; E-2100 and E-2200     Processor Family Specification

Update](https://www.intel.com/content/www/us/en/products/docs/processo rs/xe on/xeon-e-2100-specification-update.html) for details.

### New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:----
----- | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | LKF | B2/B3 | 06-8a-01/10 | | 00000028 | Core w/Hybrid Technology | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile ### Updated Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:----
----- | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5083 advisory.

  - hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
152366	Oracle Linux 7 : microcode_ctl (ELSA-2021-3028)	Nessus	Oracle Linux Local Security Checks	2021/8/9	2024/10/22	high
152447	RHEL 7 : microcode_ctl (RHSA-2021:3029)	Nessus	Red Hat Local Security Checks	2021/8/11	2024/11/7	high
152965	RHEL 7 : microcode_ctl (RHSA-2021:3323)	Nessus	Red Hat Local Security Checks	2021/9/2	2024/11/7	high
142715	RHEL 7 : microcode_ctl (RHSA-2020:5083)	Nessus	Red Hat Local Security Checks	2020/11/11	2024/11/7	medium
142961	Oracle Linux 6 : microcode_ctl (ELSA-2020-5084)	Nessus	Oracle Linux Local Security Checks	2020/11/17	2024/10/22	medium
143132	OracleVM 3.4 : microcode_ctl (OVMSA-2020-0053)	Nessus	OracleVM Local Security Checks	2020/11/20	2024/2/8	medium
184626	Rocky Linux 8 : microcode_ctl (RLSA-2021:3027)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	high
143200	RHEL 7 : microcode_ctl (RHSA-2020:5181)	Nessus	Red Hat Local Security Checks	2020/11/24	2024/11/7	medium
143205	RHEL 8 : microcode_ctl (RHSA-2020:5185)	Nessus	Red Hat Local Security Checks	2020/11/24	2024/11/7	medium
143814	SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2020:3457-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	medium
144442	Virtuozzo 7 : microcode_ctl (VZLSA-2020-5083)	Nessus	Virtuozzo Local Security Checks	2020/12/18	2024/2/1	medium

检测

插件搜索

high

high

high

medium

medium

medium

high

medium

medium

medium

medium