CVE-2024-36293: Medium severity debian/intel-microcode vulnerability
Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36293?
CVE-2024-36293 has a severity level that can potentially lead to denial of service if exploited.
How do I fix CVE-2024-36293?
To fix CVE-2024-36293, update to the latest version of the intel-microcode package, specifically version 3.20250211.1 or later.
Who is affected by CVE-2024-36293?
CVE-2024-36293 affects Intel processors that utilize Intel SGX and have improper access control in the EDECCSSA user leaf function.
Can CVE-2024-36293 be exploited remotely?
CVE-2024-36293 necessitates local access for potential exploitation, meaning it cannot be exploited remotely.
What types of systems are vulnerable to CVE-2024-36293?
Vulnerable systems include those running specific versions of the intel-microcode package on Intel processors with SGX.