==========================================================================
Ubuntu Security Notice USN-6967-1
August 19, 2024<\/p>\n
intel-microcode vulnerabilities
==========================================================================<\/p>\n
A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n
– Ubuntu 24.04 LTS
– Ubuntu 22.04 LTS
– Ubuntu 20.04 LTS
– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS<\/p>\n
Summary:<\/p>\n
Several security issues were fixed in Intel Microcode.<\/p>\n
Software Description:
– intel-microcode: Processor microcode for Intel CPUs<\/p>\n
Details:<\/p>\n
It was discovered that some Intel\u00ae Core\u2122 Ultra Processors did not properly
isolate the stream cache. A local authenticated user could potentially use
this to escalate their privileges. (CVE-2023-42667)<\/p>\n
It was discovered that some Intel\u00ae Processors did not properly isolate the
stream cache. A local authenticated user could potentially use this to
escalate their privileges. (CVE-2023-49141)<\/p>\n
It was discovered that some Intel\u00ae Processors did not correctly transition
between the executive monitor and SMI transfer monitor (STM). A privileged
local attacker could use this to escalate their privileges.
(CVE-2024-24853)<\/p>\n
It was discovered that some 3rd, 4th, and 5th Generation Intel\u00ae Xeon\u00ae
Processors failed to properly implement a protection mechanism. A local
attacker could use this to potentially escalate their privileges.
(CVE-2024-24980)<\/p>\n
It was discovered that some 3rd Generation Intel Xeon Scalable Processors
did not properly handle mirrored regions with different values. A
privileged local user could use this to cause a denial of service (system
crash). (CVE-2024-25939)<\/p>\n
Update instructions:<\/p>\n
The problem can be corrected by updating your system to the following
package versions:<\/p>\n
Ubuntu 24.04 LTS
intel-microcode 3.20240813.0ubuntu0.24.04.2<\/p>\n
Ubuntu 22.04 LTS
intel-microcode 3.20240813.0ubuntu0.22.04.2<\/p>\n
Ubuntu 20.04 LTS
intel-microcode 3.20240813.0ubuntu0.20.04.2<\/p>\n
Ubuntu 18.04 LTS
intel-microcode 3.20240813.0ubuntu0.18.04.1+esm2
Available with Ubuntu Pro<\/p>\n
Ubuntu 16.04 LTS
intel-microcode 3.20240813.0ubuntu0.16.04.1+esm2
Available with Ubuntu Pro<\/p>\n
After a standard system update you need to reboot your computer to make
all the necessary changes.<\/p>\n
References:
https:\/\/ubuntu.com\/security\/notices\/USN-6967-1
CVE-2023-42667, CVE-2023-49141, CVE-2024-24853, CVE-2024-24980,
CVE-2024-25939<\/p>\n
Package Information:
https:\/\/launchpad.net\/ubuntu\/+source\/intel-microcode\/3.20240813.0ubuntu0.24.04.2
https:\/\/launchpad.net\/ubuntu\/+source\/intel-microcode\/3.20240813.0ubuntu0.22.04.2
https:\/\/launchpad.net\/ubuntu\/+source\/intel-microcode\/3.20240813.0ubuntu0.20.04.2<\/p>\n","protected":false},"excerpt":{"rendered":"
==========================================================================Ubuntu Security Notice USN-6967-1August 19, 2024 intel-microcode vulnerabilities========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 24.04 LTS– Ubuntu 22.04 LTS– Ubuntu 20.04 LTS– Ubuntu 18.04 LTS– Ubuntu 16.04 LTS Summary: Several security issues were fixed in Intel Microcode. Software Description:– intel-microcode: Processor microcode for Intel CPUs Details: It was …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-59005","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/59005","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=59005"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/59005\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=59005"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=59005"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=59005"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}