Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3995-1 advisory.

    - Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)
      - CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th     Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via     local access.
      - CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller     configurations when using Intel SGX may allow a privileged user to potentially enable escalation of     privilege via local access.
      - CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller     configurations when using Intel SGX may allow a privileged user to potentially enable escalation of     privilege via local access.
      - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may     allow an privileged user to potentially enable a denial of service via local access.
      - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a     privileged user to potentially enable information disclosure via local access.
      - Update for functional issues.
      New Platforms:
      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       Updated Platforms:
      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | ADL            | C0       | 06-97-02/07 | 00000036 | 00000037 | Core Gen12       | ADL            | H0       | 06-97-05/07 | 00000036 | 00000037 | Core Gen12       | ADL            | L0       | 06-9a-03/80 | 00000434 | 00000435 | Core Gen12       | ADL            | R0       | 06-9a-04/80 | 00000434 | 00000435 | Core Gen12       | EMR-SP         | A0       | 06-cf-01/87 | 21000230 | 21000283 | Xeon Scalable Gen5       | EMR-SP         | A1       | 06-cf-02/87 | 21000230 | 21000283 | Xeon Scalable Gen5       | MTL            | C0       | 06-aa-04/e6 | 0000001f | 00000020 | Core Ultra Processor       | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004122 | 00004123 | Core Gen13       | RPL-HX/S       | C0       | 06-bf-02/07 | 00000036 | 00000037 | Core Gen13/Gen14       | RPL-S          | H0       | 06-bf-05/07 | 00000036 | 00000037 | Core Gen13/Gen14       | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004122 | 00004123 | Core Gen13       | SPR-SP         | E3       | 06-8f-06/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4       | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4       | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4       New Disclosures Updated in Prior Releases:
      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | ICL-D          | B0       | 06-6c-01/10 | 010002b0 | N/A      | Xeon D-17xx/D-18xx, D-27xx/D-28xx       | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003e7 | N/A      | Xeon Scalable Gen3

    - Intel CPU Microcode was updated to the 20241029 release       Update for functional issues.
      Updated Platforms:
      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | RPL-E/HX/S     | B0       | 06-b7-01/32 | 00000129 | 0000012b | Core Gen13/Gen14

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-28ea86c8aa advisory.

    - Update to upstream 2.1-47. 20241112
      - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in         intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0         up to 0x2b000603;
      - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in         intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in         intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in         intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in         intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in         intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0         up to 0x2b000603;
      - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in         intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in         intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in         intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in         intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in         intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision         0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in         intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in         intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in         intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in         intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in         intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
      - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision         0x2b0005c0 up to 0x2b000603;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision         0x36 up to 0x37;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-97-02) from revision 0x36 up to 0x37;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)         from revision 0x36 up to 0x37;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)         from revision 0x36 up to 0x37;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-97-05) from revision 0x36 up to 0x37;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36         up to 0x37;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)         from revision 0x36 up to 0x37;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)         from revision 0x36 up to 0x37;
      - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision         0x434 up to 0x435;
      - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in         intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
      - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in         intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
      - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434         up to 0x435;
      - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f         up to 0x20;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision         0x4122 up to 0x4123;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in         intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
      - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from         revision 0x4122 up to 0x4123;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in         intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122         up to 0x4123;
      - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from         revision 0x4122 up to 0x4123;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in         intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in         intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
      - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
      - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up         to 0x37;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)         from revision 0x36 up to 0x37;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)         from revision 0x36 up to 0x37;
      - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up         to 0x37;
      - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230         up to 0x21000283;
      - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in         intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
      - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in         intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
      - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230         up to 0x21000283.
    - Addresses CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
211485	SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2024:3995-1)	Nessus	SuSE Local Security Checks	high
211478	Fedora 41 : microcode_ctl (2024-28ea86c8aa)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2024-21820

high

Tenable Plugins

high

high