CVE-2024-21853: Medium severity alpine/intel-ucode vulnerability
Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/intel-ucodeto a version that resolves this vulnerability.Fixed in 20241112-r0 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20241112.1~deb12u1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20241112.1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20251111.1~deb12u1Fixed in 3.20250812.1~deb12u1Fixed in 3.20251111.1~deb13u1Fixed in 3.20250812.1~deb13u1Fixed in 3.20260227.1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21853?
CVE-2024-21853 is classified as a high severity vulnerability due to its potential to enable denial of service via local access.
How do I fix CVE-2024-21853?
To mitigate CVE-2024-21853, update the intel-microcode package to version 3.20241112.1 or later.
Who is affected by CVE-2024-21853?
CVE-2024-21853 affects users of 4th and 5th Generation Intel Xeon Processors running older versions of the intel-microcode package.
What types of attacks can exploit CVE-2024-21853?
CVE-2024-21853 can be exploited by an authorized user to trigger a denial of service condition.
Is local access required to exploit CVE-2024-21853?
Yes, CVE-2024-21853 requires local access by an authorized user to exploit the vulnerability.