Description
Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | 2019.2 IPU – Intel(R) Xeon(R) Scalable Processors Voltage Setting Modulation | See provided reference | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | intel-microcode | 3.20191112.1 | — |
| Debian 13 | intel-microcode | 3.20191112.1 | — |
| Debian 12 | intel-microcode | 3.20191112.1 | — |
| Debian 10 | intel-microcode | 3.20191112.1~deb10u1 | DSA-4565-1 |
| Debian 9 | intel-microcode | 3.20191112.1~deb9u1 | DSA-4565-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 8 | intel-microcode | 3.20191115.2~deb8u1 | DLA-2051-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | intel-microcode | 3.20191112-0ubuntu0.18.04.2 | USN-4182-1 |
| Ubuntu 16.04 LTS | intel-microcode | 3.20191112-0ubuntu0.16.04.2 | USN-4182-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | intel-microcode | 3.20191112-0ubuntu0.14.04.2 | USN-4182-2 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | microcode_ctl | 4:20190618-1.20191112.1.el8_1 | RHEA-2019:3845 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8.0 E4S | microcode_ctl | 4:20180807a-2.20191112.1.el8_0 | RHEA-2020:0635 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | ucode-intel | 20191112-3.9.1 | SUSE-SU-2019:2987-1, SUSE-SU-2019:2958-1 |
| SLES 15 | ucode-intel | 20191112-3.28.1 | SUSE-SU-2019:2986-1, SUSE-SU-2019:2957-1 |
| SLES 12 SP5 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:3091-1, SUSE-SU-2019:2959-1 |
| SLES 12 SP4 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:2988-1, SUSE-SU-2019:2959-1 |
| SLES 12 SP3 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:2988-1, SUSE-SU-2019:2959-1 |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP2 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:2988-1, SUSE-SU-2019:2959-1 |
| SLES 12 SP1 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:2988-1, SUSE-SU-2019:2959-1 |
| SLES 11 SP4 | microcode_ctl | 1.17-102.83.47.1 | SUSE-SU-2019:14220-1, SUSE-SU-2019:14217-1 |
| SLES for SAP 12 SP5 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:3091-1, SUSE-SU-2019:2959-1 |
| SLES for SAP 12 SP4 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:2988-1, SUSE-SU-2019:2959-1 |
| SLES for SAP 12 SP3 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:2988-1, SUSE-SU-2019:2959-1 |
| SLES for SAP 12 SP2 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:2988-1, SUSE-SU-2019:2959-1 |
| SLES for SAP 12 SP1 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:2988-1, SUSE-SU-2019:2959-1 |
| SUSE OpenStack Cloud Crowbar 8 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:2988-1, SUSE-SU-2019:2959-1 |
| SUSE OpenStack Cloud 8 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:2988-1, SUSE-SU-2019:2959-1 |
| SUSE OpenStack Cloud 7 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:2988-1, SUSE-SU-2019:2959-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | microcode_ctl | 1.17-102.83.47.1 | SUSE-SU-2019:14220-1, SUSE-SU-2019:14217-1 |
| SUSE HPE Helion OpenStack 8 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:2988-1, SUSE-SU-2019:2959-1 |
| SUSE Enterprise Storage 5 | ucode-intel | 20191112-13.53.1 | SUSE-SU-2019:2988-1, SUSE-SU-2019:2959-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | ucode-intel | 20210608-1.2 | openSUSE-SU-2024:11478-1 |
| openSUSE Leap 15.1 | ucode-intel | 20191112-lp151.2.9.1 | openSUSE-SU-2019:2528-1, openSUSE-SU-2019:2509-1 |
| openSUSE Leap 15.0 | ucode-intel | 20191112-lp150.2.30.1 | openSUSE-SU-2019:2527-1, openSUSE-SU-2019:2504-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | microcode_ctl | 2:2.1-47.amzn2.0.4 | ALAS2-2019-1364 |
| Amazon Linux 2 | perf +8 | 4.14.152-127.182.amzn2 | ALAS2-2019-1364 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | microcode_ctl | 2:2.1-53.3.0.4.el7_7 | ELSA-2019-4867 |
Advisories 23
- RHEA-2020:0635 Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RHEA-2019:3845 Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- USN-4182-2 intel-microcode update Ubuntu Security Notices (USN) · Jun 3, 2026
- USN-4182-1 intel-microcode update Ubuntu Security Notices (USN) · Jun 3, 2026
- DSA-4565-1 intel-microcode - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2051-1 intel-microcode - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2023-1689 Intel Prozessoren: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 15, 2026
- SUSE-SU-2019:2957-1 Security update for ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2988-1 Security update for ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2527-1 Security update for ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2509-1 Security update for ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:14220-1 Security update for microcode_ctl SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11478-1 ucode-intel-20210608-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2504-1 Security update for ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:3091-1 Security update for ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2958-1 Security update for ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2987-1 Security update for ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2528-1 Security update for ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2959-1 Security update for ucode-intel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:14217-1 Security update for microcode_ctl SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2019:2986-1 Security update for ucode-intel SUSE / openSUSE Security Updates · May 2, 2025
- ELSA-2019-4867 Important: microcode_ctl security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Dec 4, 2019
- ALAS2-2019-1364 Moderate: microcode_ctl security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Nov 16, 2019
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00271.html
- openSUSE-SU-2019:2527 vendor-advisory
- openSUSE-SU-2019:2528 vendor-advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03969en_us
- https://support.f5.com/csp/article/K42433061?utm_source=f5support&%3Butm_medium=RSS
- 20191216 [SECURITY] [DSA 4565-2] intel-microcode security update mailing-list
- [debian-lts-announce] 20191230 [SECURITY] [DLA 2051-1] intel-microcode security update mailing-list