USN-7269-2: Intel Microcode vulnerabilities
USN-7269-1 fixed vulnerabilities in Intel Microcode. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: Ke Sun, Paul Grosen and Alyssa Milburn discovered that some Intel® Processors did not properly implement Finite State Machines (FSMs) in Hardware Logic. A local privileged attacker could use this issue to cause a denial of service. (CVE-2024-31068) It was discovered that some Intel® Processors with Intel® SGX did not properly restrict access to the EDECCSSA user leaf function. A local authenticated attacker could use this issue to cause a denial of service. (CVE-2024-36293) Ke Sun, Alyssa Milburn, Benoit Morgan, and Erik Bjorge discovered that the UEFI firmware for some Intel® processors did not properly restrict access. An authenticated local attacker could use this issue to cause a denial of service. (CVE-2024-39279)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-7269-2?
The severity of USN-7269-2 is classified as high due to vulnerabilities in Intel Microcode affecting Ubuntu 24.04 LTS.
How do I fix USN-7269-2?
To fix USN-7269-2, update the intel-microcode package to version 3.20250211.0ubuntu0.24.04.1 or higher.
What vulnerabilities are addressed in USN-7269-2?
USN-7269-2 addresses multiple vulnerabilities related to improper Finite State Machines implementation in certain Intel processors.
Which package is affected by USN-7269-2?
The affected package in USN-7269-2 is intel-microcode on Ubuntu 24.04 LTS.
Who discovered the vulnerabilities in USN-7269-2?
The vulnerabilities fixed in USN-7269-2 were discovered by researchers Ke Sun, Paul Grosen, and Alyssa Milburn.