CVE-2024-24980: Medium severity alpine/intel-ucode vulnerability
Last updated 22 August 2024
Other sources
Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/intel-ucodeto a version that resolves this vulnerability.Fixed in 20240813-r0 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20240813.1~deb12u1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20240813.1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20251111.1~deb12u1Fixed in 3.20250812.1~deb12u1Fixed in 3.20251111.1~deb13u1Fixed in 3.20250812.1~deb13u1Fixed in 3.20260227.1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24980?
CVE-2024-24980 has been rated as a critical vulnerability due to its potential to allow privilege escalation.
How do I fix CVE-2024-24980?
To mitigate CVE-2024-24980, update the intel-microcode package to version 3.20240813.1~deb11u1, 3.20240813.1~deb12u1, or 3.20240813.2.
Who is affected by CVE-2024-24980?
CVE-2024-24980 affects users of 3rd, 4th, and 5th Generation Intel Xeon Processors.
What type of vulnerability is CVE-2024-24980?
CVE-2024-24980 is classified as a protection mechanism failure vulnerability.
When was CVE-2024-24980 last updated?
CVE-2024-24980 was last updated on 22 August 2024.