Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to potentially enable a denial of service via local access.

The version of microcode_ctl installed on the remote host is prior to 2.1-47. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2682 advisory.

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-23984)

    Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some     Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-24853)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-24968)

    Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a     privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24980)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of microcode_ctl installed on the remote host is prior to 2.1-47.44. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1950 advisory.

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-23984)

    Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some     Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-24853)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-24968)

    Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a     privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24980)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-748 advisory.

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-23984)

    Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some     Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-24853)

    NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.htmlNOTE:
    https://github.com/intel/Intel-Linux-Processor-Microcode-Data-     Files/releases/tag/microcode-20240910DEBIANBUG: [1081363] (CVE-2024-24968)

    Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a     privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24980)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the microcode_ctl-20240910-1.el9 build changelog.

  - Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2024-23984)

  - Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some     Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local     access. (CVE-2024-24853)

  - Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an     privileged user to potentially enable a denial of service via local access. (CVE-2024-24968)

  - Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a     privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24980)

  - Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a     privileged user to potentially enable denial of service via local access. (CVE-2024-25939)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7033-1 advisory.

    It was discovered that some Intel(R) Processors did not properly restrict access to the Running Average     Power Limit (RAPL) interface. This may allow a local privileged attacker to obtain sensitive information.
    (CVE-2024-23984)

    It was discovered that some Intel(R) Processors did not properly implement finite state machines (FSMs) in     hardware logic. This may allow a local privileged attacker to cause a denial of service (system crash).
    (CVE-2024-24968)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3332-1 advisory.

    - Intel CPU Microcode was updated to the 20240910 release (bsc#1230400)
    - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a     privileged user to potentially enable information disclosure via local access.
    - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may     allow an privileged user to potentially enable a denial of service via local access.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1d4155bd39 advisory.

    - Update to upstream 2.1-45. 20240910
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision         0x35 up to 0x36;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-97-02) from revision 0x35 up to 0x36;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)         from revision 0x35 up to 0x36;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)         from revision 0x35 up to 0x36;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-97-05) from revision 0x35 up to 0x36;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35         up to 0x36;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)         from revision 0x35 up to 0x36;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)         from revision 0x35 up to 0x36;
      - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision         0x433 up to 0x434;
      - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in         intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
      - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in         intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
      - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433         up to 0x434;
      - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1e         up to 0x1f;
      - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up         to 0x129;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision         0x4121 up to 0x4122;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in         intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
      - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from         revision 0x4121 up to 0x4122;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in         intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121         up to 0x4122;
      - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from         revision 0x4121 up to 0x4122;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in         intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in         intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
      - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
      - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up         to 0x36;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)         from revision 0x35 up to 0x36;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)         from revision 0x35 up to 0x36;
      - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up         to 0x36;
      - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up         to 0x1a (old pf 0x11).
    - Addresses CVE-2024-23984, CVE-2024-24968
    - Added the documentation directory to the list of files owned by the package



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3307-1 advisory.

    - Intel CPU Microcode was updated to the 20240910 release (bsc#1230400)
    - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a     privileged user to potentially enable information disclosure via local access.
    - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may     allow an privileged user to potentially enable a denial of service via local access.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e6b5e38ae6 advisory.

    - Update to upstream 2.1-45. 20240910
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision         0x35 up to 0x36;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-97-02) from revision 0x35 up to 0x36;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)         from revision 0x35 up to 0x36;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)         from revision 0x35 up to 0x36;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-97-05) from revision 0x35 up to 0x36;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35         up to 0x36;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)         from revision 0x35 up to 0x36;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)         from revision 0x35 up to 0x36;
      - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision         0x433 up to 0x434;
      - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in         intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
      - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in         intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
      - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433         up to 0x434;
      - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1e         up to 0x1f;
      - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up         to 0x129;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision         0x4121 up to 0x4122;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in         intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
      - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from         revision 0x4121 up to 0x4122;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in         intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121         up to 0x4122;
      - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from         revision 0x4121 up to 0x4122;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in         intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in         intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
      - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
      - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up         to 0x36;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)         from revision 0x35 up to 0x36;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)         from revision 0x35 up to 0x36;
      - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up         to 0x36;
      - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up         to 0x1a (old pf 0x11).
    - Addresses CVE-2024-23984, CVE-2024-24968
    - Added the documentation directory to the list of files owned by the package


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d5026193-6fa2-11ef-99bc-1c697a616631 advisory.

    Intel reports:

              A potential security vulnerability in the Running Average Power Limit               (RAPL) interface for some Intel Processors may allow information               disclosure.  Intel has released firmware updates to mitigate this               potential vulnerability.


              A potential security vulnerability in some Intel Processors may allow               denial of service.  Intel has released firmware updates to mitigate               this potential vulnerability.


Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
210076	Amazon Linux 2 : microcode_ctl (ALAS-2024-2682)	Nessus	Amazon Linux Local Security Checks	high
210017	Amazon Linux AMI : microcode_ctl (ALAS-2024-1950)	Nessus	Amazon Linux Local Security Checks	high
209998	Amazon Linux 2023 : microcode_ctl (ALAS2023-2024-748)	Nessus	Amazon Linux Local Security Checks	high
207917	CentOS 9 : microcode_ctl-20240910-1.el9	Nessus	CentOS Local Security Checks	high
207723	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Intel Microcode vulnerabilities (USN-7033-1)	Nessus	Ubuntu Local Security Checks	medium
207502	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ucode-intel (SUSE-SU-2024:3332-1)	Nessus	SuSE Local Security Checks	medium
207429	Fedora 39 : microcode_ctl (2024-1d4155bd39)	Nessus	Fedora Local Security Checks	medium
207422	SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2024:3307-1)	Nessus	SuSE Local Security Checks	medium
207325	Fedora 40 : microcode_ctl (2024-e6b5e38ae6)	Nessus	Fedora Local Security Checks	medium
206960	FreeBSD : Intel CPUs -- multiple vulnerabilities (d5026193-6fa2-11ef-99bc-1c697a616631)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2024-24968

medium

Tenable Plugins

high

high

high

high

medium

medium

medium

medium

medium

medium