Skip to content
OpenAdvisories
High · 7.8 CVE-2023-42667 EUVD-2023-47099GHSA-fc9m-v759-xj58

Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable es…

Published Aug 14, 2024 · Updated Aug 22, 2024 · Assigned by intel

Description

Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffectedFixed
— Intel(R) Core(TM) Ultra Processor stream cache mechanism See references —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 intel-microcode 3.20240813.1 —
Debian 13 intel-microcode 3.20240813.1 —
Debian 12 intel-microcode 3.20240813.1~deb12u1 —
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS intel-microcode 3.20240813.0ubuntu0.24.04.2 USN-6967-1
Ubuntu 22.04 LTS intel-microcode 3.20240813.0ubuntu0.22.04.2 USN-6967-1
Ubuntu 20.04 LTS intel-microcode 3.20240813.0ubuntu0.20.04.2 USN-6967-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS intel-microcode 3.20240813.0ubuntu0.18.04.1+esm2 USN-6967-1
Ubuntu Pro 16.04 LTS intel-microcode 3.20240813.0ubuntu0.16.04.1+esm2 USN-6967-1
Ubuntu Pro 14.04 LTS intel-microcode No fix yet —
ReleasePackageFixed inAdvisory
SLES 15 SP6 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLES 15 SP5 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLES 15 SP4 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLES 15 SP3 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLES 15 SP2 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
Show 17 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 ucode-intel 20240813-140.1 SUSE-SU-2024:2941-1
SLES 11 SP4 microcode_ctl 1.17-102.83.81.1 SUSE-SU-2025:1032-1
SLES for SAP 15 SP4 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLES for SAP 15 SP3 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLES for SAP 15 SP2 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLES for SAP 12 SP5 ucode-intel 20240813-140.1 SUSE-SU-2024:2941-1
SLE Micro 5.5 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLE Micro 5.4 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLE Micro 5.3 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLE Micro 5.2 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLE Micro 5.1 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLE HPC 15 SP4 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLE HPC 15 SP3 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SLE HPC 15 SP2 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SUSE Manager Server 4.3 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SUSE Manager Proxy 4.3 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
SUSE Enterprise Storage 7.1 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed ucode-intel 20240813-1.1 openSUSE-SU-2024:14268-1
openSUSE Leap 15.6 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
openSUSE Leap 15.5 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.5 ucode-intel 20240813-150200.44.1 SUSE-SU-2024:3095-1
ReleasePackageFixed inAdvisory
Alpine v3.24 intel-ucode 20240813-r0 —
Alpine v3.23 intel-ucode 20240813-r0 —
Alpine v3.22 intel-ucode 20240813-r0 —
Alpine v3.21 intel-ucode 20240813-r0 —
Alpine v3.20 intel-ucode 20240813-r0 —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 intel-ucode 20240813-r0 —
Alpine v3.18 intel-ucode 20240813-r0 —
Alpine v3.17 intel-ucode 20240813-r0 —

Advisories 6

References