What vulnerabilities are addressed in RHSA-2021:3028?

RHSA-2021:3028 addresses vulnerabilities related to Special Register Buffer Data Sampling (CVE-2020-0543), Vector Register Data Sampling (CVE-2020-0548), and L1D Cache Eviction Sampling (CVE-2020-0549).

What is the severity of RHSA-2021:3028?

The severity of RHSA-2021:3028 is categorized as critical due to the potential impact on confidential data exposure and side-channel attacks.

How do I fix RHSA-2021:3028?

To fix RHSA-2021:3028, you should update the microcode_ctl package as provided in the advisory.

Which systems are affected by RHSA-2021:3028?

RHSA-2021:3028 affects systems running on Intel architecture that utilize the microcode_ctl package for updates.

Is there a workaround for RHSA-2021:3028 until I can apply the update?

Currently, there are no known workarounds for RHSA-2021:3028, so applying the update is recommended as soon as possible.

Vulnerability/
RHSA-2021:3028

9/8/2021

18/7/2024

RHSA-2021:3028: Important: microcode_ctl security, bug fix and enhancement update

First published: Mon Aug 09 2021(Updated: )

The microcode_ctl packages provide microcode updates for Intel. Security Fix(es): <li> hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)</li> <li> hw: Vector Register Data Sampling (CVE-2020-0548)</li> <li> hw: L1D Cache Eviction Sampling (CVE-2020-0549)</li> <li> hw: vt-d related privilege escalation (CVE-2020-24489)</li> <li> hw: improper isolation of shared resources in some Intel Processors</li> (CVE-2020-24511) <li> hw: observable timing discrepancy in some Intel Processors</li> (CVE-2020-24512) <li> hw: Information disclosure issue in Intel SGX via RAPL interface</li> (CVE-2020-8695) <li> hw: Vector Register Leakage-Active (CVE-2020-8696)</li> <li> hw: Fast forward store predictor (CVE-2020-8698)</li>

Affected Software	Affected Version	How to fix

Never miss a vulnerability like this again

Reference Links

https://access.redhat.com/errata/RHSA-2021:3028 (Advisory)

Frequently Asked Questions

What vulnerabilities are addressed in RHSA-2021:3028?
RHSA-2021:3028 addresses vulnerabilities related to Special Register Buffer Data Sampling (CVE-2020-0543), Vector Register Data Sampling (CVE-2020-0548), and L1D Cache Eviction Sampling (CVE-2020-0549).
What is the severity of RHSA-2021:3028?
The severity of RHSA-2021:3028 is categorized as critical due to the potential impact on confidential data exposure and side-channel attacks.
How do I fix RHSA-2021:3028?
To fix RHSA-2021:3028, you should update the microcode_ctl package as provided in the advisory.
Which systems are affected by RHSA-2021:3028?
RHSA-2021:3028 affects systems running on Intel architecture that utilize the microcode_ctl package for updates.
Is there a workaround for RHSA-2021:3028 until I can apply the update?
Currently, there are no known workarounds for RHSA-2021:3028, so applying the update is recommended as soon as possible.

agent/severity
agent/type
agent/softwarecombine
agent/last-modified-date
agent/first-publish-date
agent/title
agent/references
agent/remedy
agent/tags
agent/description
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2021:3028
agent/event
agent/source

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.