Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Fixed packages 1

Vulnerabilities 9

• Unscored —
  CVE-2020-0543

  Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticate…

  linux xen xen intel-microcode Debian Ubuntu Alpine
  Jun 15, 2020
• Unscored —
  CVE-2020-0548

  Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure…

  Intel Intel(R) Processors intel-microcode intel-microcode Debian Ubuntu Alpine
  Jan 28, 2020
• Unscored —
  CVE-2020-0549

  Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially…

  Intel Intel(R) Processors intel-microcode intel-microcode Debian Ubuntu
  Jan 28, 2020
• Unscored —
  CVE-2020-24489

  Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of p…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  Jun 9, 2021
• Unscored —
  CVE-2020-24511

  Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enabl…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  Jun 9, 2021
• Unscored —
  CVE-2020-24512

  Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable informa…

  intel-microcode intel-microcode Debian Ubuntu
  Jun 9, 2021
• Unscored —
  CVE-2020-8695

  Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially en…

  intel-microcode intel-microcode Debian Ubuntu
  Nov 12, 2020
• Unscored —
  CVE-2020-8696

  Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authentic…

  intel-microcode intel-microcode Debian Ubuntu
  Nov 12, 2020
• Unscored —
  CVE-2020-8698

  Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enabl…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  Nov 12, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1788786
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1788788
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1827165
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1828583
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890355
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890356
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1962650
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1962702
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1962722
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1972326
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1972329
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3364.json
• report
  https://access.redhat.com/security/cve/CVE-2020-0543
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-0543
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-0543
• article
  https://access.redhat.com/solutions/5142691
• article
  https://access.redhat.com/solutions/5142751
• article
  https://blogs.intel.com/technology/2020/06/ipas-security-advisories-for-june-2020/#gs.6uyhri
• article
  https://software.intel.com/security-software-guidance/insights/deep-dive-special-register-buffer-data-sampling
• article
  https://xenbits.xen.org/xsa/advisory-320.html
• report
  https://access.redhat.com/security/cve/CVE-2020-0548
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-0548
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-0548
• article
  https://access.redhat.com/solutions/l1d-cache-eviction-and-vector-register-sampling
• article
  https://blogs.intel.com/technology/2020/01/ipas-intel-sa-00329/
• article
  https://cacheoutattack.com/CacheOut.pdf
• article
  https://software.intel.com/security-software-guidance/software-guidance/l1d-eviction-sampling
• report
  https://access.redhat.com/security/cve/CVE-2020-0549
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-0549
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-0549
• report
  https://access.redhat.com/security/cve/CVE-2020-8695
• article
  https://access.redhat.com/articles/5569051
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-8695
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-8695
• article
  https://en.wikipedia.org/wiki/Power_analysis
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html
• report
  https://access.redhat.com/security/cve/CVE-2020-8696
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-8696