Incomplete cleanup in Intel VT-d products
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2020-24489 |
| CWE-ID | CWE-459 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
10th Generation Intel Core Processors Hardware solutions / Firmware 11th Generation Intel Core Processors Hardware solutions / Firmware Intel Pentium Processor N Series Intel Celeron Processor J Series Hardware solutions / Firmware Intel Celeron Processor N Series Intel Atom Processor Hardware solutions / Firmware Intel Celeron Processor N Series Hardware solutions / Firmware Intel Pentium Processor Silver Series Hardware solutions / Firmware Intel Core Processors with Intel Hybrid Technology Hardware solutions / Firmware Intel Pentium Processor J Series Hardware solutions / Other hardware appliances Intel Atom Processor E3900 Series Hardware solutions / Other hardware appliances Intel Pentium Processor N Series Hardware solutions / Other hardware appliances |
| Vendor | Intel |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Incomplete cleanup
EUVDB-ID: #VU54191
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-24489
CWE-ID:
CWE-459 - Incomplete cleanup
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to incomplete cleanup, which leads to security restrictions bypass and privilege escalation.
MitigationInstall updates from vendor's website.
Vulnerable software versions10th Generation Intel Core Processors: All versions
11th Generation Intel Core Processors: All versions
Intel Pentium Processor J Series: All versions
Intel Pentium Processor N Series Intel Celeron Processor J Series: All versions
Intel Celeron Processor N Series Intel Atom Processor: All versions
Intel Atom Processor E3900 Series: All versions
Intel Pentium Processor N Series: All versions
Intel Celeron Processor N Series: All versions
Intel Pentium Processor Silver Series: All versions
Intel Core Processors with Intel Hybrid Technology: All versions
CPE2.3- cpe:2.3:h:intel:10th_generation_intel_core_processors:*:*:*:*:*:*:*:*
- cpe:2.3:h:intel:11th_generation_intel_core_processors:*:*:*:*:*:*:*:*
- cpe:2.3:h:intel:intel_pentium_processor_j_series:*:*:*:*:*:*:*:*
- cpe:2.3:h:intel:intel_pentium_processor_n_series_intel_celeron_processor_j_series:*:*:*:*:*:*:*:*
- cpe:2.3:h:intel:intel_celeron_processor_n_series_intel_atom_processor:*:*:*:*:*:*:*:*
- cpe:2.3:h:intel:intel_atom_processor_e3900_series:*:*:*:*:*:*:*:*
- cpe:2.3:h:intel:intel_pentium_processor_n_series:*:*:*:*:*:*:*:*
- cpe:2.3:h:intel:intel_celeron_processor_n_series:*:*:*:*:*:*:*:*
- cpe:2.3:h:intel:intel_pentium_processor_silver_series:*:*:*:*:*:*:*:*
- cpe:2.3:h:intel:intel_core_processors_with_intel_hybrid_technology:*:*:*:*:*:*:*:*
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
