CVE-2024-21853: Medium severity debian/intel-microcode vulnerability
Published Nov 13, 2024
·Updated
Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access.
Affected Software
1 affected componentFixes available
debian/intel-microcode<=3.20240813.1~deb11u1, <=3.20240910.1~deb11u1, <=3.20240910.1~deb12u1, <=3.20231114.1~deb12u1
3.20241112.1
Event History
Nov 13, 2024
CVE Published
via MITRE·08:56 PM
Data Sourced
via MITRE·08:56 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Dec 11, 2024
Data Sourced
via Ubuntu·03:11 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-21853?
CVE-2024-21853 is classified as a high severity vulnerability due to its potential to enable denial of service via local access.
2
How do I fix CVE-2024-21853?
To mitigate CVE-2024-21853, update the intel-microcode package to version 3.20241112.1 or later.
3
Who is affected by CVE-2024-21853?
CVE-2024-21853 affects users of 4th and 5th Generation Intel Xeon Processors running older versions of the intel-microcode package.
4
What types of attacks can exploit CVE-2024-21853?
CVE-2024-21853 can be exploited by an authorized user to trigger a denial of service condition.
5
Is local access required to exploit CVE-2024-21853?
Yes, CVE-2024-21853 requires local access by an authorized user to exploit the vulnerability.