Red Hat Security Advisory: microcode_ctl security update

Fixed packages 1

Vulnerabilities 7

• Medium 6.5
  CVE-2023-28746

  Information exposure through microarchitectural state after transient execution from some register files for some Intel…

  linux xen xen intel-microcode Debian Ubuntu Alpine
  Mar 14, 2024
• Medium 6.5
  CVE-2023-39368

  Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to po…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  Mar 14, 2024
• Medium 6.1
  CVE-2023-22655

  Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Inte…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  Mar 14, 2024
• Medium 5.5
  CVE-2023-38575

  Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorize…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  Mar 14, 2024
• Medium 5.3
  CVE-2023-43490

  Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allow …

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  Mar 14, 2024
• Medium 4.7
  CVE-2023-46103

  Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an auth…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  May 16, 2024
• Low 2.8
  CVE-2023-45733

  Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enab…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  May 16, 2024

References

• article
  https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270698
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270700
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270701
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270703
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270704
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2292296
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2292300
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9401.json
• report
  https://access.redhat.com/security/cve/CVE-2023-22655
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-22655
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-22655
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html
• report
  https://access.redhat.com/security/cve/CVE-2023-28746
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-28746
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-28746
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html
• report
  https://access.redhat.com/security/cve/CVE-2023-38575
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-38575
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-38575
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html
• report
  https://access.redhat.com/security/cve/CVE-2023-39368
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-39368
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-39368
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html
• report
  https://access.redhat.com/security/cve/CVE-2023-43490
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-43490
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-43490
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html
• report
  https://access.redhat.com/security/cve/CVE-2023-45733
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-45733
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-45733
• article
  https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html
• report
  https://access.redhat.com/security/cve/CVE-2023-46103
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-46103
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-46103
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html