CVE-2020-24489
First published: Thu May 20 2021(Updated: )
Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/redhat-virtualization-host | <0:4.3.16-20210615.0.el7_9 | 0:4.3.16-20210615.0.el7_9 |
| redhat/redhat-virtualization-host | <0:4.4.6-20210615.0.el8_4 | 0:4.4.6-20210615.0.el8_4 |
| debian/intel-microcode | 3.20220510.1~deb10u1 3.20230808.1~deb10u1 3.20230808.1~deb11u1 3.20230808.1~deb12u1 3.20230808.1 | |
| Intel Atom x5-E3930 firmware | ||
| Intel Atom x5-E3940 firmware | ||
| Intel Atom X7-a3950 Firmware | ||
| Intel Celeron J1750 Firmware | ||
| Intel Celeron J1800 Firmware | ||
| Intel Celeron J1850 | ||
| Intel Celeron J1900 | ||
| Intel Celeron J3060 Firmware | ||
| Intel Celeron J3160 Firmware | ||
| Intel Celeron J3355E | ||
| Intel Celeron J3355E Firmware | ||
| Intel Celeron J3455 Firmware | ||
| Intel Celeron J3455 | ||
| Intel Celeron J4005 Firmware | ||
| Intel Celeron J4025 Firmware | ||
| Intel Celeron J4105 Firmware | ||
| Intel Celeron J4115 Firmware | ||
| Intel Celeron J4125 Firmware | ||
| Intel Celeron J6412 | ||
| Intel Celeron J6413 Firmware | ||
| Intel Celeron N2805 Firmware | ||
| Intel Celeron N2806 Firmware | ||
| Intel Celeron N2807 Firmware | ||
| Intel Celeron N2808 Firmware | ||
| Intel Celeron N2810 Firmware | ||
| Intel Celeron N2815 Firmware | ||
| Intel Celeron N2820 Firmware | ||
| Intel Celeron N2830 Firmware | ||
| Intel Celeron N2840 Firmware | ||
| Intel Celeron N2910 Firmware | ||
| Intel Celeron n2920 firmware | ||
| Intel Celeron n2930 firmware | ||
| Intel Celeron N2940 Firmware | ||
| Intel Celeron N3000 | ||
| Intel Celeron N3010 Firmware | ||
| Intel Celeron N3050 Firmware | ||
| Intel Celeron N3060 Firmware | ||
| Intel Celeron N3150 Firmware | ||
| Intel Celeron N3160 Firmware | ||
| Intel Celeron N3350 | ||
| Intel Celeron N3350E Firmware | ||
| Intel Celeron N3450 Firmware | ||
| Intel Celeron N4000C | ||
| Intel Celeron N4000C Firmware | ||
| Intel Celeron N4020 Firmware | ||
| Intel Celeron N4020 | ||
| Intel Celeron N4100 Firmware | ||
| Intel Celeron n4120 firmware | ||
| Intel Celeron N4500 Firmware | ||
| Intel Celeron N4505 Firmware | ||
| Intel Celeron N5095 Firmware | ||
| Intel Celeron N5100 | ||
| Intel Celeron N5105 Firmware | ||
| Intel Celeron N6210 Firmware | ||
| Intel Celeron N6211 | ||
| Intel Core i3-1000G1 Firmware | ||
| Intel Core i3-1000G4 Firmware | ||
| Intel Core i3-1000NG4 Firmware | ||
| Intel Core i3-1005G1 firmware | ||
| Intel Core i3-10100F Firmware | ||
| Intel Core i3-10100E Firmware | ||
| Intel Core i3-10100F Firmware | ||
| Intel Core i3-10100T Firmware | ||
| Intel Core i3-10100TE Firmware | ||
| Intel Core i3-10100Y Firmware | ||
| Intel Core i3-10105F | ||
| Intel Core i3-10105F Firmware | ||
| Intel Core i3-10105T Firmware | ||
| Intel Core i3-10110u | ||
| Intel Core i3-10110Y | ||
| Intel Core i3-10300 firmware | ||
| Intel Core i3-10300T Firmware | ||
| Intel Core i3-10305 | ||
| Intel Core i3-10305T | ||
| Intel Core i3-10320 Firmware | ||
| Intel Core i3-10325 | ||
| Intel Core i3-11100B Firmware | ||
| Intel Core i3-1110G4 Firmware | ||
| Intel Core i3-1115G4 Firmware | ||
| Intel Core i3-1115G4E Firmware | ||
| Intel Core i3-1115GRE Firmware | ||
| Intel Core i3-1120G4 Firmware | ||
| Intel Core i3-1125G4 Firmware | ||
| Intel Core i3-L13G4 Firmware | ||
| Intel Core i5-10200H Firmware | ||
| Intel Core i5-10210U firmware | ||
| Intel Core i5-10210Y Firmware | ||
| Intel Core i5-10300H Firmware | ||
| Intel Core i5-1030G4 Firmware | ||
| Intel Core i5-1030NG7 Firmware | ||
| Intel Core i5-1030NG7 Firmware | ||
| Intel Core i5-10310U Firmware | ||
| Intel Core i5-10310Y Firmware | ||
| Intel Core i5-1035G1 | ||
| Intel Core i5-1035G4 | ||
| Intel Core i5-1035G7 Firmware | ||
| Intel Core i5-1038NG7 | ||
| Intel Core i5-10400F | ||
| Intel Core i5-10400 | ||
| Intel Core i5-10400H firmware | ||
| Intel Core i5-10400T Firmware | ||
| Intel Core i5-10500E Firmware | ||
| Intel Core i5-10500E Firmware | ||
| Intel Core i5-10500H Firmware | ||
| Intel Core i5-10500T Firmware | ||
| Intel Core i5-10500TE Firmware | ||
| Intel Core i5-10505 Firmware | ||
| Intel Core i5-10600 Firmware | ||
| Intel Core i5-10600K Firmware | ||
| Intel Core i5-10600K Firmware | ||
| Intel Core i5-10600T Firmware | ||
| Intel Core i5-11260H Firmware | ||
| Intel Core i5-11300H Firmware | ||
| Intel Core i5-1130G7 Firmware | ||
| Intel Core i5-11320H Firmware | ||
| Intel Core i5-1135G7 Firmware | ||
| Intel Core i5-11400 Firmware | ||
| Intel Core i5-11400F Firmware | ||
| Intel Core i5-11400H Firmware | ||
| Intel Core i5-11400T Firmware | ||
| Intel Core i5-1140G7 Firmware | ||
| Intel Core i5-1145G7 Firmware | ||
| Intel Core i5-1145G7E Firmware | ||
| Intel Core i5-1145GRE Firmware | ||
| Intel Core i5-11500 | ||
| Intel Core i5-11500B Firmware | ||
| Intel Core i5-11500H | ||
| Intel Core i5-11500T Firmware | ||
| Intel Core i5-1155G7 Firmware | ||
| Intel Core i5-11600 firmware | ||
| Intel Core i5-11600KF | ||
| Intel Core i5-11600KF Firmware | ||
| Intel Core i5-11600T Firmware | ||
| Intel Core i5-L16G7 Firmware | ||
| Intel Core i7-10510U Firmware | ||
| Intel Core i7-10510Y Firmware | ||
| Intel Core i7-1060G7 Firmware | ||
| Intel Core i7-1060NG7 Firmware | ||
| Intel Core i7-10610U Firmware | ||
| Intel Core i7-1065G7 Firmware | ||
| Intel Core i7-1068NG7 Firmware | ||
| Intel Core i7-10700 | ||
| Intel Core i7-10700E firmware | ||
| Intel Core i7-10700F Firmware | ||
| Intel Core i7-10700K Firmware | ||
| Intel Core i7-10700K Firmware | ||
| Intel Core i7-10700T Firmware | ||
| Intel Core i7-10700TE Firmware | ||
| Intel Core i7-10710U Firmware | ||
| Intel Core i7-10750H Firmware | ||
| Intel Core i7-10810U Firmware | ||
| Intel Core i7-10850H Firmware | ||
| Intel Core i7-10870H | ||
| Intel Core i7-10875H Firmware | ||
| Intel Core i7-11370H | ||
| Intel Core i7-11375H Firmware | ||
| Intel Core i7-11390H | ||
| Intel Core i7-1160G7 Firmware | ||
| Intel Core i7-1165G7 Firmware | ||
| Intel Core i7-11700 firmware | ||
| Intel Core i7-11700b Firmware | ||
| Intel Core i7-11700F Firmware | ||
| Intel Core i7-11700K Firmware | ||
| Intel Core i7-11700K Firmware | ||
| Intel Core i7-11700T Firmware | ||
| Intel Core i7-11800H Firmware | ||
| Intel Core i7-1180G7 Firmware | ||
| Intel Core i7-11850H Firmware | ||
| Intel Core i7-1185G7 Firmware | ||
| Intel Core i7-1185G7E Firmware | ||
| Intel Core i7-1185GRE Firmware | ||
| Intel Core i7-1195G7 Firmware | ||
| Intel Core i9-10850K Firmware | ||
| Intel Core i9-10885H Firmware | ||
| Intel Core i9-10900E firmware | ||
| Intel Core i9-10900E firmware | ||
| Intel Core i9-10900F Firmware | ||
| Intel Core i9-10900K Firmware | ||
| Intel Core i9-10900K | ||
| Intel Core i9-10900T Firmware | ||
| Intel Core i9-10900TE Firmware | ||
| Intel Core i9-10910 Firmware | ||
| Intel Core i9-10980HK | ||
| Intel Core i9-11900 firmware | ||
| Intel Core i9-11900F | ||
| Intel Core i9-11900H Firmware | ||
| Intel Core i9-11900 firmware | ||
| Intel Core i9-11900KB Firmware | ||
| Intel Core i9-11900K | ||
| Intel Core i9-11900T Firmware | ||
| Intel Core i9-11950H Firmware | ||
| Intel Core i9-11980HK Firmware | ||
| Intel Pentium J2850 Firmware | ||
| Intel Pentium J2900 Firmware | ||
| Intel Pentium J3710 Firmware | ||
| Intel Pentium J4205 | ||
| Intel Pentium J6426 Firmware | ||
| Intel Pentium N3510 Firmware | ||
| Intel Pentium N3520 Firmware | ||
| Intel Pentium N3530 Firmware | ||
| Intel Pentium Processors | ||
| Intel Pentium N3700 Firmware | ||
| Intel Pentium N3710 Firmware | ||
| Intel Pentium N4200 Firmware | ||
| Intel Pentium N4200E Firmware | ||
| Intel Pentium N6415 Firmware | ||
| Intel Pentium Silver A1030 Firmware | ||
| Intel Pentium Silver J5005 Firmware | ||
| Intel Pentium Silver J5040 Firmware | ||
| Intel Pentium Silver N5000 | ||
| Intel Pentium Silver N5030 Firmware | ||
| Intel Pentium Silver N6000 Firmware | ||
| Intel Pentium Silver N6005 Firmware | ||
| Debian Linux | =9.0 | |
| Debian Linux | =10.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html
- https://www.debian.org/security/2021/dsa-4934
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
- https://access.redhat.com/errata/RHSA-2021:2299
- https://access.redhat.com/errata/RHSA-2021:2302
- https://access.redhat.com/errata/RHSA-2021:2300
- https://access.redhat.com/errata/RHSA-2021:2306
- https://access.redhat.com/errata/RHSA-2021:2307
- https://access.redhat.com/errata/RHSA-2021:2308
- https://access.redhat.com/errata/RHSA-2021:2301
- https://access.redhat.com/errata/RHSA-2021:2303
- https://access.redhat.com/errata/RHSA-2021:2304
- https://access.redhat.com/errata/RHSA-2021:2305
- https://access.redhat.com/security/cve/cve-2020-24489
- https://access.redhat.com/errata/RHSA-2021:2519
- https://access.redhat.com/errata/RHSA-2021:2522
- https://access.redhat.com/errata/RHSA-2021:3027
- https://access.redhat.com/errata/RHSA-2021:3028
- https://access.redhat.com/errata/RHSA-2021:3029
- https://access.redhat.com/errata/RHSA-2021:3176
- https://access.redhat.com/errata/RHSA-2021:3255
- https://access.redhat.com/errata/RHSA-2021:3323
- https://access.redhat.com/errata/RHSA-2021:3322
- https://access.redhat.com/errata/RHSA-2021:3317
- https://access.redhat.com/errata/RHSA-2021:3364
- https://bugzilla.redhat.com/show_bug.cgi?id=1962650
- https://www.cve.org/CVERecord?id=CVE-2020-24489 https://nvd.nist.gov/vuln/detail/CVE-2020-24489
- https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20210608
- https://security-tracker.debian.org/tracker/CVE-2020-24489
Parent vulnerabilities
(Appears in the following advisories)
Frequently Asked Questions
What is the severity of CVE-2020-24489?
CVE-2020-24489 is rated as high severity due to its potential for escalation of privileges.
How do I fix CVE-2020-24489?
To mitigate CVE-2020-24489, users should update to the fixed versions of affected Intel VT-d products or apply vendor-specific patches.
Who is affected by CVE-2020-24489?
CVE-2020-24489 affects systems utilizing certain Intel VT-d products with incomplete cleanup processes.
What types of systems are vulnerable to CVE-2020-24489?
Systems with specific Intel processors, including Atom, Celeron, Core, and Pentium families, are vulnerable to CVE-2020-24489.
How can I determine if my system is vulnerable to CVE-2020-24489?
You can check your system's architecture against Intel's advisories to identify if it is susceptible to CVE-2020-24489.
- collector/redhat-cve
- collector/security-tracker-debian
- agent/type
- agent/first-publish-date
- agent/references
- agent/author
- agent/weakness
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-24489
- agent/last-modified-date
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- package-manager/redhat
- package-manager/debian
- vendor/intel
- canonical/intel atom x5-e3930 firmware
- canonical/intel atom x5-e3940 firmware
- canonical/intel atom x7-a3950 firmware
- canonical/intel celeron j1750 firmware
- canonical/intel celeron j1800 firmware
- canonical/intel celeron j1850
- canonical/intel celeron j1900
- canonical/intel celeron j3060 firmware
- canonical/intel celeron j3160 firmware
- canonical/intel celeron j3355e
- canonical/intel celeron j3355e firmware
- canonical/intel celeron j3455 firmware
- canonical/intel celeron j3455
- canonical/intel celeron j4005 firmware
- canonical/intel celeron j4025 firmware
- canonical/intel celeron j4105 firmware
- canonical/intel celeron j4115 firmware
- canonical/intel celeron j4125 firmware
- canonical/intel celeron j6412
- canonical/intel celeron j6413 firmware
- canonical/intel celeron n2805 firmware
- canonical/intel celeron n2806 firmware
- canonical/intel celeron n2807 firmware
- canonical/intel celeron n2808 firmware
- canonical/intel celeron n2810 firmware
- canonical/intel celeron n2815 firmware
- canonical/intel celeron n2820 firmware
- canonical/intel celeron n2830 firmware
- canonical/intel celeron n2840 firmware
- canonical/intel celeron n2910 firmware
- canonical/intel celeron n2920 firmware
- canonical/intel celeron n2930 firmware
- canonical/intel celeron n2940 firmware
- canonical/intel celeron n3000
- canonical/intel celeron n3010 firmware
- canonical/intel celeron n3050 firmware
- canonical/intel celeron n3060 firmware
- canonical/intel celeron n3150 firmware
- canonical/intel celeron n3160 firmware
- canonical/intel celeron n3350
- canonical/intel celeron n3350e firmware
- canonical/intel celeron n3450 firmware
- canonical/intel celeron n4000c
- canonical/intel celeron n4000c firmware
- canonical/intel celeron n4020 firmware
- canonical/intel celeron n4020
- canonical/intel celeron n4100 firmware
- canonical/intel celeron n4120 firmware
- canonical/intel celeron n4500 firmware
- canonical/intel celeron n4505 firmware
- canonical/intel celeron n5095 firmware
- canonical/intel celeron n5100
- canonical/intel celeron n5105 firmware
- canonical/intel celeron n6210 firmware
- canonical/intel celeron n6211
- canonical/intel core i3-1000g1 firmware
- canonical/intel core i3-1000g4 firmware
- canonical/intel core i3-1000ng4 firmware
- canonical/intel core i3-1005g1 firmware
- canonical/intel core i3-10100f firmware
- canonical/intel core i3-10100e firmware
- canonical/intel core i3-10100t firmware
- canonical/intel core i3-10100te firmware
- canonical/intel core i3-10100y firmware
- canonical/intel core i3-10105f
- canonical/intel core i3-10105f firmware
- canonical/intel core i3-10105t firmware
- canonical/intel core i3-10110u
- canonical/intel core i3-10110y
- canonical/intel core i3-10300 firmware
- canonical/intel core i3-10300t firmware
- canonical/intel core i3-10305
- canonical/intel core i3-10305t
- canonical/intel core i3-10320 firmware
- canonical/intel core i3-10325
- canonical/intel core i3-11100b firmware
- canonical/intel core i3-1110g4 firmware
- canonical/intel core i3-1115g4 firmware
- canonical/intel core i3-1115g4e firmware
- canonical/intel core i3-1115gre firmware
- canonical/intel core i3-1120g4 firmware
- canonical/intel core i3-1125g4 firmware
- canonical/intel core i3-l13g4 firmware
- canonical/intel core i5-10200h firmware
- canonical/intel core i5-10210u firmware
- canonical/intel core i5-10210y firmware
- canonical/intel core i5-10300h firmware
- canonical/intel core i5-1030g4 firmware
- canonical/intel core i5-1030ng7 firmware
- canonical/intel core i5-10310u firmware
- canonical/intel core i5-10310y firmware
- canonical/intel core i5-1035g1
- canonical/intel core i5-1035g4
- canonical/intel core i5-1035g7 firmware
- canonical/intel core i5-1038ng7
- canonical/intel core i5-10400f
- canonical/intel core i5-10400
- canonical/intel core i5-10400h firmware
- canonical/intel core i5-10400t firmware
- canonical/intel core i5-10500e firmware
- canonical/intel core i5-10500h firmware
- canonical/intel core i5-10500t firmware
- canonical/intel core i5-10500te firmware
- canonical/intel core i5-10505 firmware
- canonical/intel core i5-10600 firmware
- canonical/intel core i5-10600k firmware
- canonical/intel core i5-10600t firmware
- canonical/intel core i5-11260h firmware
- canonical/intel core i5-11300h firmware
- canonical/intel core i5-1130g7 firmware
- canonical/intel core i5-11320h firmware
- canonical/intel core i5-1135g7 firmware
- canonical/intel core i5-11400 firmware
- canonical/intel core i5-11400f firmware
- canonical/intel core i5-11400h firmware
- canonical/intel core i5-11400t firmware
- canonical/intel core i5-1140g7 firmware
- canonical/intel core i5-1145g7 firmware
- canonical/intel core i5-1145g7e firmware
- canonical/intel core i5-1145gre firmware
- canonical/intel core i5-11500
- canonical/intel core i5-11500b firmware
- canonical/intel core i5-11500h
- canonical/intel core i5-11500t firmware
- canonical/intel core i5-1155g7 firmware
- canonical/intel core i5-11600 firmware
- canonical/intel core i5-11600kf
- canonical/intel core i5-11600kf firmware
- canonical/intel core i5-11600t firmware
- canonical/intel core i5-l16g7 firmware
- canonical/intel core i7-10510u firmware
- canonical/intel core i7-10510y firmware
- canonical/intel core i7-1060g7 firmware
- canonical/intel core i7-1060ng7 firmware
- canonical/intel core i7-10610u firmware
- canonical/intel core i7-1065g7 firmware
- canonical/intel core i7-1068ng7 firmware
- canonical/intel core i7-10700
- canonical/intel core i7-10700e firmware
- canonical/intel core i7-10700f firmware
- canonical/intel core i7-10700k firmware
- canonical/intel core i7-10700t firmware
- canonical/intel core i7-10700te firmware
- canonical/intel core i7-10710u firmware
- canonical/intel core i7-10750h firmware
- canonical/intel core i7-10810u firmware
- canonical/intel core i7-10850h firmware
- canonical/intel core i7-10870h
- canonical/intel core i7-10875h firmware
- canonical/intel core i7-11370h
- canonical/intel core i7-11375h firmware
- canonical/intel core i7-11390h
- canonical/intel core i7-1160g7 firmware
- canonical/intel core i7-1165g7 firmware
- canonical/intel core i7-11700 firmware
- canonical/intel core i7-11700b firmware
- canonical/intel core i7-11700f firmware
- canonical/intel core i7-11700k firmware
- canonical/intel core i7-11700t firmware
- canonical/intel core i7-11800h firmware
- canonical/intel core i7-1180g7 firmware
- canonical/intel core i7-11850h firmware
- canonical/intel core i7-1185g7 firmware
- canonical/intel core i7-1185g7e firmware
- canonical/intel core i7-1185gre firmware
- canonical/intel core i7-1195g7 firmware
- canonical/intel core i9-10850k firmware
- canonical/intel core i9-10885h firmware
- canonical/intel core i9-10900e firmware
- canonical/intel core i9-10900f firmware
- canonical/intel core i9-10900k firmware
- canonical/intel core i9-10900k
- canonical/intel core i9-10900t firmware
- canonical/intel core i9-10900te firmware
- canonical/intel core i9-10910 firmware
- canonical/intel core i9-10980hk
- canonical/intel core i9-11900 firmware
- canonical/intel core i9-11900f
- canonical/intel core i9-11900h firmware
- canonical/intel core i9-11900kb firmware
- canonical/intel core i9-11900k
- canonical/intel core i9-11900t firmware
- canonical/intel core i9-11950h firmware
- canonical/intel core i9-11980hk firmware
- canonical/intel pentium j2850 firmware
- canonical/intel pentium j2900 firmware
- canonical/intel pentium j3710 firmware
- canonical/intel pentium j4205
- canonical/intel pentium j6426 firmware
- canonical/intel pentium n3510 firmware
- canonical/intel pentium n3520 firmware
- canonical/intel pentium n3530 firmware
- canonical/intel pentium processors
- canonical/intel pentium n3700 firmware
- canonical/intel pentium n3710 firmware
- canonical/intel pentium n4200 firmware
- canonical/intel pentium n4200e firmware
- canonical/intel pentium n6415 firmware
- canonical/intel pentium silver a1030 firmware
- canonical/intel pentium silver j5005 firmware
- canonical/intel pentium silver j5040 firmware
- canonical/intel pentium silver n5000
- canonical/intel pentium silver n5030 firmware
- canonical/intel pentium silver n6000 firmware
- canonical/intel pentium silver n6005 firmware
- vendor/debian
- canonical/debian linux
- version/debian linux/9.0
- version/debian linux/10.0