USN-7269-2: Intel Microcode vulnerabilities

Published Feb 24, 2025
·
Updated

USN-7269-1 fixed vulnerabilities in Intel Microcode. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: Ke Sun, Paul Grosen and Alyssa Milburn discovered that some Intel® Processors did not properly implement Finite State Machines (FSMs) in Hardware Logic. A local privileged attacker could use this issue to cause a denial of service. (CVE-2024-31068) It was discovered that some Intel® Processors with Intel® SGX did not properly restrict access to the EDECCSSA user leaf function. A local authenticated attacker could use this issue to cause a denial of service. (CVE-2024-36293) Ke Sun, Alyssa Milburn, Benoit Morgan, and Erik Bjorge discovered that the UEFI firmware for some Intel® processors did not properly restrict access. An authenticated local attacker could use this issue to cause a denial of service. (CVE-2024-39279)

Affected Software

2 affected componentsFixes available
All of the following
ubuntu/intel-microcode<3.20250211.0ubuntu0.24.04.1
3.20250211.0ubuntu0.24.04.1
Ubuntu Ubuntu=24.04

Event History

Feb 24, 2025
Advisory Published
via Ubuntu·12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of USN-7269-2?

The severity of USN-7269-2 is classified as high due to vulnerabilities in Intel Microcode affecting Ubuntu 24.04 LTS.

2

How do I fix USN-7269-2?

To fix USN-7269-2, update the intel-microcode package to version 3.20250211.0ubuntu0.24.04.1 or higher.

3

What vulnerabilities are addressed in USN-7269-2?

USN-7269-2 addresses multiple vulnerabilities related to improper Finite State Machines implementation in certain Intel processors.

4

Which package is affected by USN-7269-2?

The affected package in USN-7269-2 is intel-microcode on Ubuntu 24.04 LTS.

5

Who discovered the vulnerabilities in USN-7269-2?

The vulnerabilities fixed in USN-7269-2 were discovered by researchers Ke Sun, Paul Grosen, and Alyssa Milburn.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203