CVE-2024-24853: High severity alpine/intel-ucode vulnerability
Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/intel-ucodeto a version that resolves this vulnerability.Fixed in 20240813-r0 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20240813.1~deb12u1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20240813.1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20251111.1~deb12u1Fixed in 3.20250812.1~deb12u1Fixed in 3.20251111.1~deb13u1Fixed in 3.20250812.1~deb13u1Fixed in 3.20260227.1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24853?
The severity of CVE-2024-24853 is categorized as high due to its potential to enable privilege escalation.
How do I fix CVE-2024-24853?
To fix CVE-2024-24853, update the intel-microcode package to version 3.20240813.1~deb11u1 or later.
Who is affected by CVE-2024-24853?
CVE-2024-24853 affects systems using certain versions of Intel processors with the intel-microcode package on Debian.
What should I do if I cannot update my system for CVE-2024-24853?
If unable to update, limit physical access to the system to mitigate the risk associated with CVE-2024-24853.
Is CVE-2024-24853 exploited in the wild?
As of now, there is no public indication that CVE-2024-24853 is actively exploited in the wild.