Summary
The microcode_ctl packages provide microcode updates for Intel.
Security Fix(es):
* hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)
* hw: Vector Register Data Sampling (CVE-2020-0548)
* hw: L1D Cache Eviction Sampling (CVE-2020-0549)
* hw: vt-d related privilege escalation (CVE-2020-24489)
* hw: improper isolation of shared resources in some Intel Processors
(CVE-2020-24511)
* hw: observable timing discrepancy in some Intel Processors
(CVE-2020-24512)
* hw: Information disclosure issue in Intel SGX via RAPL interface
(CVE-2020-8695)
* hw: Vector Register Leakage-Active (CVE-2020-8696)
* hw: Fast forward store predictor (CVE-2020-8698)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | microcode_ctl | 4:20210216-1.20210608.1.el8_4 |
Vulnerabilities 9
-
Unscored —
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticate…
-
Unscored —
Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure…
-
Unscored —
Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially…
-
Unscored —
Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of p…
-
Unscored —
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enabl…
-
Unscored —
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable informa…
-
Unscored —
Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially en…
-
Unscored —
Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authentic…
-
Unscored —
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enabl…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1788786
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1788788
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1827165
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1828583
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1890355
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1890356
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1962650
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1962702
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1962722
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1972325
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1972328