CVE-2024-23918: High severity alpine/intel-ucode vulnerability
Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/intel-ucodeto a version that resolves this vulnerability.Fixed in 20241112-r0 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20241112.1~deb12u1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20241112.1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20251111.1~deb12u1Fixed in 3.20250812.1~deb12u1Fixed in 3.20251111.1~deb13u1Fixed in 3.20250812.1~deb13u1Fixed in 3.20260227.1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23918?
CVE-2024-23918 has been classified with a high severity level due to its potential for privilege escalation.
How do I fix CVE-2024-23918?
To mitigate CVE-2024-23918, update the Intel microcode to version 3.20241112.1 or later.
What systems are affected by CVE-2024-23918?
CVE-2024-23918 affects Intel Xeon processors using specific memory controller configurations.
Who is impacted by CVE-2024-23918?
Privileged users with local access to affected systems may be impacted by CVE-2024-23918.
What potential risks does CVE-2024-23918 pose?
CVE-2024-23918 poses a risk of privilege escalation, allowing unauthorized access to system resources.