SB2024082941 - Fedora 40 update for microcode_ctl

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2024082941

SB2024082941 - Fedora 40 update for microcode_ctl

Published: August 29, 2024

Security Bulletin ID SB2024082941
Severity
Low
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 secuirty vulnerabilities.


1) Incorrect behavior order (CVE-ID: CVE-2024-24853)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to an incorrect behavior order in SMI Transfer monitor (STM). A local user can escalate privileges on the system.


2) Protection Mechanism Failure (CVE-ID: CVE-2024-24980)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient implementation of security measures. A local privileged user can escalate privileges on the system.


3) Resource management error (CVE-ID: CVE-2024-25939)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the application. Mirrored regions with different values in 3rd Generation Intel Xeon Scalable Processors may allow a local privileged user to crash the system.


Remediation

Install update from vendor's website.

References