==========================================================================
Ubuntu Security Notice USN-6797-1
May 29, 2024<\/p>\n
intel-microcode vulnerabilities
==========================================================================<\/p>\n
A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n
– Ubuntu 24.04 LTS
– Ubuntu 23.10
– Ubuntu 22.04 LTS
– Ubuntu 20.04 LTS
– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS<\/p>\n
Summary:<\/p>\n
Several security issues were fixed in Intel Microcode.<\/p>\n
Software Description:
– intel-microcode: Processor microcode for Intel CPUs<\/p>\n
Details:<\/p>\n
It was discovered that some 3rd and 4th Generation Intel\u00ae Xeon\u00ae Processors
did not properly restrict access to certain hardware features when using
Intel\u00ae SGX or Intel\u00ae TDX. This may allow a privileged local user to
potentially further escalate their privileges on the system. This issue only
affected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and
Ubuntu 16.04 LTS. (CVE-2023-22655)<\/p>\n
It was discovered that some Intel\u00ae Atom\u00ae Processors did not properly clear
register state when performing various operations. A local attacker could
use this to obtain sensitive information via a transient execution attack.
This issue only affected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS,
Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2023-28746)<\/p>\n
It was discovered that some Intel\u00ae Processors did not properly clear the
state of various hardware structures when switching execution contexts. A
local attacker could use this to access privileged information. This issue only
affected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and
Ubuntu 16.04 LTS. (CVE-2023-38575)<\/p>\n
It was discovered that some Intel\u00ae Processors did not properly enforce bus
lock regulator protections. A remote attacker could use this to cause a
denial of service. This issue only affected Ubuntu 23.10, Ubuntu 22.04 LTS,
Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2023-39368)<\/p>\n
It was discovered that some Intel\u00ae Xeon\u00ae D Processors did not properly
calculate the SGX base key when using Intel\u00ae SGX. A privileged local
attacker could use this to obtain sensitive information. This issue only
affected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and
Ubuntu 16.04 LTS. (CVE-2023-43490)<\/p>\n
It was discovered that some Intel\u00ae Processors did not properly protect against
concurrent accesses. A local attacker could use this to obtain sensitive
information. (CVE-2023-45733)<\/p>\n
It was discovered that some Intel\u00ae Processors TDX module software did not
properly validate input. A privileged local attacker could use this information
to potentially further escalate their privileges on the system.
(CVE-2023-45745, CVE-2023-47855)<\/p>\n
It was discovered that some Intel\u00ae Core\u2122 Ultra processors did not properly
handle particular instruction sequences. A local attacker could use this
issue to cause a denial of service. (CVE-2023-46103)<\/p>\n
Update instructions:<\/p>\n
The problem can be corrected by updating your system to the following
package versions:<\/p>\n
Ubuntu 24.04 LTS
intel-microcode 3.20240514.0ubuntu0.24.04.1<\/p>\n
Ubuntu 23.10
intel-microcode 3.20240514.0ubuntu0.23.10.1<\/p>\n
Ubuntu 22.04 LTS
intel-microcode 3.20240514.0ubuntu0.22.04.1<\/p>\n
Ubuntu 20.04 LTS
intel-microcode 3.20240514.0ubuntu0.20.04.1<\/p>\n
Ubuntu 18.04 LTS
intel-microcode 3.20240514.0ubuntu0.18.04.1+esm1
Available with Ubuntu Pro<\/p>\n
Ubuntu 16.04 LTS
intel-microcode 3.20240514.0ubuntu0.16.04.1+esm1
Available with Ubuntu Pro<\/p>\n
After a standard system update you need to reboot your computer to make
all the necessary changes.<\/p>\n
References:
https:\/\/ubuntu.com\/security\/notices\/USN-6797-1
CVE-2023-22655, CVE-2023-28746, CVE-2023-38575, CVE-2023-39368,
CVE-2023-43490, CVE-2023-45733, CVE-2023-45745, CVE-2023-46103,
CVE-2023-47855<\/p>\n
Package Information:
https:\/\/launchpad.net\/ubuntu\/+source\/intel-microcode\/3.20240514.0ubuntu0.24.04.1
https:\/\/launchpad.net\/ubuntu\/+source\/intel-microcode\/3.20240514.0ubuntu0.23.10.1
https:\/\/launchpad.net\/ubuntu\/+source\/intel-microcode\/3.20240514.0ubuntu0.22.04.1
https:\/\/launchpad.net\/ubuntu\/+source\/intel-microcode\/3.20240514.0ubuntu0.20.04.1<\/p>\n
—
Alex Murray
Staff Engineer | Security Engineering
Adelaide, Australia (GMT+0930)<\/p>\n","protected":false},"excerpt":{"rendered":"
==========================================================================Ubuntu Security Notice USN-6797-1May 29, 2024 intel-microcode vulnerabilities========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 24.04 LTS– Ubuntu 23.10– Ubuntu 22.04 LTS– Ubuntu 20.04 LTS– Ubuntu 18.04 LTS– Ubuntu 16.04 LTS Summary: Several security issues were fixed in Intel Microcode. Software Description:– intel-microcode: Processor microcode for Intel CPUs Details: …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-57113","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/57113","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=57113"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/57113\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=57113"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=57113"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=57113"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}