CVE-2024-21820: High severity debian/intel-microcode vulnerability
Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20241112.1~deb12u1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20241112.1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20251111.1~deb12u1Fixed in 3.20250812.1~deb12u1Fixed in 3.20251111.1~deb13u1Fixed in 3.20250812.1~deb13u1Fixed in 3.20260227.1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21820?
The severity of CVE-2024-21820 is not explicitly rated but it may lead to potential privilege escalation for a local user.
How do I fix CVE-2024-21820?
To fix CVE-2024-21820, update to the Intel microcode version 3.20241112.1 or later.
Which systems are affected by CVE-2024-21820?
CVE-2024-21820 affects configurations of Intel Xeon processors utilizing Intel SGX.
Who can exploit CVE-2024-21820?
CVE-2024-21820 can potentially be exploited by a privileged user with local access to the affected systems.
What configurations are vulnerable in CVE-2024-21820?
CVE-2024-21820 involves incorrect default permissions in specific configurations of Intel Xeon processor memory controllers.