Lucene search

RedHatRHSA-2021:2308

HistoryJun 08, 2021 - 11:43 p.m.

(RHSA-2021:2308) Important: microcode_ctl security, bug fix and enhancement update

2021-06-0823:43:58

access.redhat.com

microcode

intel

security update

bug fix

enhancement

cpu

privilege escalation

isolation

timing discrepancy

information disclosure

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0.001

Percentile

31.9%

JSON

The microcode_ctl packages provide microcode updates for Intel.

Security Fix(es):

hw: vt-d related privilege escalation (CVE-2020-24489)
hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)
hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)
hw: information disclosure on some Intel Atom processors (CVE-2020-24513)

Bug Fix(es) and Enhancement(s):

Update Intel CPU microcode to microcode-20210525 release

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64microcode_ctl< 20210216-1.20210525.1.el8_4microcode_ctl-20210216-1.20210525.1.el8_4.x86_64.rpm