CVE-2024-36293

ucode-intel: This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20250211 release (b...

CVE-2024-36293 is fixed in 3 products on 1 platform, first by intel-microcode 3.20250211.0ubuntu0.18.04.1+esm1, released February 10, 2025. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
6.5
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0027
19th percentile

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20250211 release (bsc#1237096) - CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware Logic for some Intel Processors may allow privileged user to potentially enable denial of service via local access. - CVE-2024-36293: A potential security vulnerability in some Intel Software Guard Extensions (Intel SGX) Platforms may allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. - CVE-2024-39355: A potential security vulnerability in some 13th and 14th Generation Intel Core Processors may allow denial of service. Intel is releasing microcode and UEFI reference code updates to mitigate this potential vulnerability. - CVE-2024-37020: A potential security vulnerability in the Intel Data Streaming Accelerator (Intel DSA) for some Intel Xeon Processors may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. - New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | SRF-SP | C0 | 06-af-03/01 | | 03000330 | Xeon 6700-Series Processors with E-Cores ### Updated Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/07 | 00000037 | 00000038 | Core Gen12 | ADL | H0 | 06-97-05/07 | 00000037 | 00000038 | Core Gen12 | ADL | L0 | 06-9a-03/80 | 00000435 | 00000436 | Core Gen12 | ADL | R0 | 06-9a-04/80 | 00000435 | 00000436 | Core Gen12 | ADL-N | N0 | 06-be-00/19 | 0000001a | 0000001c | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E | AZB | A0/R0 | 06-9a-04/40 | 00000007 | 00000009 | Intel(R) Atom(R) C1100 | CFL-H | R0 | 06-9e-0d/22 | 00000100 | 00000102 | Core Gen9 Mobile | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000f8 | 000000fa | Core Gen8 Desktop, Mobile, Xeon E | EMR-SP | A0 | 06-cf-01/87 | 21000283 | 21000291 | Xeon Scalable Gen5 | EMR-SP | A1 | 06-cf-02/87 | 21000283 | 21000291 | Xeon Scalable Gen5 | ICL-D | B0 | 06-6c-01/10 | 010002b0 | 010002c0 | Xeon D-17xx, D-27xx | ICX-SP | Dx/M1 | 06-6a-06/87 | 0d0003e7 | 0d0003f5 | Xeon Scalable Gen3 | RPL-E/HX/S | B0 | 06-b7-01/32 | 0000012b | 0000012c | Core Gen13/Gen14 | RPL-H/P/PX 6+8 | J0 | 06-ba-02/e0 | 00004123 | 00004124 | Core Gen13 | RPL-HX/S | C0 | 06-bf-02/07 | 00000037 | 00000038 | Core Gen13/Gen14 | RPL-U 2+8 | Q0 | 06-ba-03/e0 | 00004123 | 00004124 | Core Gen13 | RPL-S | H0 | 06-bf-05/07 | 00000037 | 00000038 | Core Gen13/Gen14 | RKL-S | B0 | 06-a7-01/02 | 00000062 | 00000063 | Core Gen11 | SPR-HBM | Bx | 06-8f-08/10 | 2c000390 | 2c0003e0 | Xeon Max | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000603 | 2b000620 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000603 | 2b000620 | Xeon Scalable Gen4 | TWL | N0 | 06-be-00/19 | 0000001a | 0000001c | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E ### New Disclosures Updated in Prior Releases | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CFL-H/S | P0 | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9

Where it's fixed

ProductFixed inFixReleased
Linux
intel-microcode · Debian 12.15 (bookworm) 3.20250211.1~deb12u1 DEBIAN-CVE-2024-36293 Feb 12, 2025
intel-microcode · Debian 13.5 (trixie) 3.20250211.1 DEBIAN-CVE-2024-36293 Feb 12, 2025
intel-microcode · Debian 14 3.20250211.1 DEBIAN-CVE-2024-36293 Feb 12, 2025
intel-microcode · Ubuntu 18.04.6 LTS (bionic) 3.20250211.0ubuntu0.18.04.1+esm1 intel-microcode 3.20250211.0ubuntu0.18.04.1+esm1 Feb 10, 2025
intel-microcode · Ubuntu 20.04 LTS (focal) 3.20250211.0ubuntu0.20.04.1 intel-microcode 3.20250211.0ubuntu0.20.04.1 Feb 10, 2025
intel-microcode · Ubuntu 22.04.1 LTS (jammy) 3.20250211.0ubuntu0.22.04.1 intel-microcode 3.20250211.0ubuntu0.22.04.1 Feb 10, 2025
intel-microcode · Ubuntu 24.04.5 LTS (noble) 3.20250211.0ubuntu0.24.04.1 intel-microcode 3.20250211.0ubuntu0.24.04.1 Feb 10, 2025
intel-microcode · Ubuntu 24.10 (oracular) 3.20250211.0ubuntu0.24.10.1 intel-microcode 3.20250211.0ubuntu0.24.10.1 Feb 11, 2025
microcode_ctl · RHEL 8 4:20250211-1.el8_10 RHEA-2025:3114 Mar 24, 2025
ucode-intel · opensuse-leap 15.6 20250211-150200.53.1 SUSE-SU-2025:0591-1 Feb 19, 2025
ucode-intel · sles 15.6 20250211-150200.53.1 SUSE-SU-2025:0591-1 Feb 19, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.