Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Fixed packages 8

Vulnerabilities 3

• Unscored —
  CVE-2020-0543

  Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticate…

  linux xen xen intel-microcode Debian Ubuntu Alpine
  Jun 15, 2020
• Unscored —
  CVE-2020-0548

  Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure…

  Intel Intel(R) Processors intel-microcode intel-microcode Debian Ubuntu Alpine
  Jan 28, 2020
• Unscored —
  CVE-2020-0549

  Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially…

  Intel Intel(R) Processors intel-microcode intel-microcode Debian Ubuntu
  Jan 28, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/solutions/5142751
• article
  https://access.redhat.com/solutions/5142691
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1788786
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1788788
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1827165
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1835555
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1839193
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2433.json
• report
  https://access.redhat.com/security/cve/CVE-2020-0543
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-0543
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-0543
• article
  https://blogs.intel.com/technology/2020/06/ipas-security-advisories-for-june-2020/#gs.6uyhri
• article
  https://software.intel.com/security-software-guidance/insights/deep-dive-special-register-buffer-data-sampling
• article
  https://xenbits.xen.org/xsa/advisory-320.html
• report
  https://access.redhat.com/security/cve/CVE-2020-0548
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-0548
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-0548
• article
  https://access.redhat.com/solutions/l1d-cache-eviction-and-vector-register-sampling
• article
  https://blogs.intel.com/technology/2020/01/ipas-intel-sa-00329/
• article
  https://cacheoutattack.com/CacheOut.pdf
• article
  https://software.intel.com/security-software-guidance/software-guidance/l1d-eviction-sampling
• report
  https://access.redhat.com/security/cve/CVE-2020-0549
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-0549
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-0549