Lucene search

RedHatRHSA-2021:2306

HistoryJun 08, 2021 - 11:42 p.m.

(RHSA-2021:2306) Important: microcode_ctl security, bug fix and enhancement update

2021-06-0823:42:27

access.redhat.com

microcode update

security fix

privilege escalation

shared resources

timing discrepancy

information disclosure

intel cpus

bug fix

enhancement

microcode-20210525

vt-d

intel atom processors

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0.001

Percentile

31.9%

JSON

The microcode_ctl packages provide microcode updates for Intel.

Security Fix(es):

hw: vt-d related privilege escalation (CVE-2020-24489)
hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)
hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)
hw: information disclosure on some Intel Atom processors (CVE-2020-24513)

Bug Fix(es) and Enhancement(s):

Update Intel CPU microcode to microcode-20210525 release

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64microcode_ctl< 20190618-1.20210525.1.el8_1microcode_ctl-20190618-1.20210525.1.el8_1.x86_64.rpm