CVE-2024-23984: Medium severity alpine/intel-ucode vulnerability
Last updated 8 December 2024
Other sources
Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/intel-ucodeto a version that resolves this vulnerability.Fixed in 20240910-r0 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20240910.1~deb12u1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20240910.1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20251111.1~deb12u1Fixed in 3.20250812.1~deb12u1Fixed in 3.20251111.1~deb13u1Fixed in 3.20250812.1~deb13u1Fixed in 3.20260227.1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23984?
CVE-2024-23984 has been classified as a medium severity vulnerability.
How do I fix CVE-2024-23984?
To fix CVE-2024-23984, update the intel-microcode package to version 3.20240910.1~deb11u1 or later.
What is CVE-2024-23984 about?
CVE-2024-23984 relates to an observable discrepancy in the RAPL interface for certain Intel processors that may allow a privileged user to disclose information locally.
Who is affected by CVE-2024-23984?
CVE-2024-23984 affects users of specific Intel processors running vulnerable versions of the intel-microcode package.
Is CVE-2024-23984 exploitable remotely?
CVE-2024-23984 requires local access for exploitation, thus it is not remotely exploitable.