Summary
Ke Sun, Paul Grosen and Alyssa Milburn discovered that some Intel®
Processors did not properly implement Finite State Machines (FSMs) in
Hardware Logic. A local privileged attacker could use this issue to cause a
denial of service. (CVE-2024-31068)
It was discovered that some Intel® Processors with Intel® SGX did not
properly restrict access to the EDECCSSA user leaf function. A local
authenticated attacker could use this issue to cause a denial of
service. (CVE-2024-36293)
Ke Sun, Alyssa Milburn, Benoit Morgan, and Erik Bjorge discovered that the
UEFI firmware for some Intel® processors did not properly restrict
access. An authenticated local attacker could use this issue to cause a
denial of service. (CVE-2024-39279)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | intel-microcode | 3.20250211.0ubuntu0.20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | intel-microcode | 3.20250211.0ubuntu0.22.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | intel-microcode | 3.20250211.0ubuntu0.16.04.1+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | intel-microcode | 3.20250211.0ubuntu0.18.04.1+esm1 |
Vulnerabilities 3
-
Medium 6.5
Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an …
-
Medium 6.5
Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user …
-
Medium 5.3
Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to poten…