Description
Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of service via local access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Intel(R) Xeon Processors | See references | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | microcode_ctl | 2:2.1-53.amzn2023.0.7 | ALAS2023-2024-716, ALAS2023-2024-712 |
| Amazon Linux 2 | microcode_ctl | 2:2.1-47.amzn2.4.19 | ALAS2-2024-2635, ALAS2-2024-2631 |
Advisories 5
- WID-SEC-2024-1828 Intel Prozessor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 26, 2025
- ALAS2-2024-2635 Important: microcode_ctl security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 10, 2024
- ALAS2023-2024-716 Important: microcode_ctl security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Sep 26, 2024
- ALAS2-2024-2631 Moderate: microcode_ctl security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Sep 5, 2024
- ALAS2023-2024-712 Moderate: microcode_ctl security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Sep 4, 2024