{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for microcode_ctl",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for microcode_ctl fixes the following issues:\n\n - CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware\n     Logic for some Intel Processors may allow privileged user to\n     potentially enable denial of service via local access. (bsc#1237096)\n - CVE-2024-36293: A potential security vulnerability in some Intel\n     Software Guard Extensions (Intel SGX) Platforms may allow denial\n     of service. Intel is releasing microcode updates to mitigate this\n     potential vulnerability. (bsc#1237096)\n - CVE-2024-39355: A potential security vulnerability in some\n     13th and 14th Generation Intel Core Processors may allow denial\n     of service. Intel is releasing microcode and UEFI reference code\n     updates to mitigate this potential vulnerability. (bsc#1237096)\n - CVE-2024-37020: A potential security vulnerability in the Intel\n     Data Streaming Accelerator (Intel DSA) for some Intel Xeon Processors\n     may allow denial of service. Intel is releasing software updates to\n     mitigate this potential vulnerability. (bsc#1237096)\n - CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic\n     in some 4th and 5th Generation Intel Xeon Processors may allow an\n     authorized user to potentially enable denial of service via local access. (bsc#1233313) \n - CVE-2024-23918: Improper conditions check in some Intel Xeon processor\n     memory controller configurations when using Intel SGX may allow a\n     privileged user to potentially enable escalation of privilege via\n     local access. (bsc#1233313)\n - CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor\n     memory controller configurations when using Intel SGX may allow a privileged\n     user to potentially enable escalation of privilege via local access. (bsc#1233313)\n - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in\n     some Intel Processors may allow an privileged user to potentially enable a\n     denial of service via local access. (bsc#1230400)\n - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel\n     Processors may allow a privileged user to potentially enable information\n     disclosure via local access. (bsc#1230400)\n - CVE-2024-24853: Incorrect behavior order in transition between executive\n     monitor and SMI transfer monitor (STM) in some Intel(R) Processor may\n     allow a privileged user to potentially enable escalation of privilege\n     via local access. (bsc#1229129)\n - CVE-2024-25939: Mirrored regions with different values in 3rd Generation Intel(R)\n     Xeon(R) Scalable Processors may allow a privileged user to potentially enable\n     denial of service via local access. (bsc#1229129)\n - CVE-2024-24980: Protection mechanism failure in some 3rd, 4th, and 5th Generation\n     Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable\n     escalation of privilege via local access. (bsc#1229129)\n - CVE-2023-42667: Improper isolation in the Intel(R) Core(TM) Ultra Processor stream\n     cache mechanism may allow an authenticated user to potentially enable escalation\n     of privilege via local access. (bsc#1229129)\n - CVE-2023-49141: Improper isolation in some Intel(R) Processors stream cache mechanism\n     may allow an authenticated user to potentially enable escalation of privilege via\n     local access. (bsc#1229129)\n - CVE-2023-45733: Hardware logic contains race conditions in some Intel(R) Processors\n     may allow an authenticated user to potentially enable partial information disclosure\n     via local access. (bsc#1224277)\n - CVE-2023-46103: Sequence of processor instructions leads to unexpected behavior in\n     Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially\n     enable denial of service via local access. (bsc#1224277)\n - CVE-2023-45745: Improper input validation in some Intel(R) TDX module software before\n     version 1.5.05.46.698 may allow a privileged user to potentially enable escalation\n     of privilege via local access. (bsc#1224277)\n - CVE-2023-47855: Improper input validation in some Intel(R) TDX module software before\n     version 1.5.05.46.698 may allow a privileged user to potentially enable escalation\n     of privilege via local access. (bsc#1224277)\n - CVE-2023-39368: Protection mechanism failure of bus lock regulator\n     for some Intel Processors may allow an unauthenticated user to\n     potentially enable denial of service via network access. (bsc#1221323)\n - CVE-2023-38575: Non-transparent sharing of return predictor targets\n     between contexts in some Intel Processors may allow an authorized\n     user to potentially enable information disclosure via local access. (bsc#1221323)   \n - CVE-2023-28746: Information exposure through microarchitectural\n     state after transient execution from some register files for some\n     Intel Atom Processors may allow an authenticated user to potentially\n     enable information disclosure via local access. (bsc#1221323)\n - CVE-2023-22655: Protection mechanism failure in some 3rd and 4th\n     Generation Intel Xeon Processors when using Intel SGX or Intel TDX\n     may allow a privileged user to potentially enable escalation of\n     privilege via local access. (bsc#1221323)\n - CVE-2023-43490: Incorrect calculation in microcode keying mechanism\n     for some Intel Xeon D Processors with Intel SGX may allow a\n     privileged user to potentially enable information disclosure via\n     local access.  (bsc#1221323)\n - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)\n - CVE-2022-40982: Information exposure through microarchitectural state after transient\n     execution in certain vector execution units for some Intel(R) Processors may allow\n     an authenticated user to potentially enable information disclosure via local access. (bsc#1206418) \n - CVE-2023-23908: Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable\n     processors may allow a privileged user to potentially enable information disclosure\n     via local access.\n - CVE-2022-41804: Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some\n     Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation\n     of privilege via local access.\n\nOther fixes:\n    \n- Intel CPU Microcode was updated to the 20250211 release (bsc#1237096)\n  - Security updates for INTEL-SA-01166 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html\n  - Security updates for INTEL-SA-01213 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html\n  - Security updates for INTEL-SA-01139 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html\n  - Security updates for INTEL-SA-01228 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01228.html\n  - Security updates for INTEL-SA-01194 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01194.html\n  - Update for functional issues. Refer to Intel Core Ultra Processor https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.\n  - Update for functional issues. Refer to 13th/14th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.\n  - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.\n  - Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123 for details.\n  - Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.\n  - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.\n  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.\n  - Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.\n  - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071 for details.\n  - Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/709192 for details.\n  - Update for functional issues. Refer to Intel Xeon 6700-Series Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/820922 for details.\n  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details\n\n- Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)\n  - Security updates for [INTEL-SA-01101](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html).\n  - Security updates for [INTEL-SA-01079](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html).\n  - Security updates for [INTEL-SA-01079](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html).\n  - Updated security updates for [INTEL-SA-01097](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html).\n  - Updated security updates for [INTEL-SA-01103](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html).\n  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n  - Update for functional issues. Refer to [14th/13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [5th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/793902) for details.\n  - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-1700 and D-1800 Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714069) for details\n\n- Intel CPU Microcode was updated to the 20241029 release (bsc#1230400)\n  - Update for functional issues. Refer to [14th/13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n\n- Intel CPU Microcode was updated to the 20240910 release (bsc#1230400)\n  - Security updates for [INTEL-SA-01103](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html)\n  - Security updates for [INTEL-SA-01097](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html)\n  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n\n- Intel CPU Microcode was updated to the 20240813 release (bsc#1229129)\n  - Security updates for [INTEL-SA-01083](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html)\n  - Security updates for [INTEL-SA-01118](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html)\n  - Security updates for [INTEL-SA-01100](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html)\n  - Security updates for [INTEL-SA-01038](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html)\n  - Security updates for [INTEL-SA-01046](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html)\n  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n  - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n  - Update for functional issues. Refer to [10th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.\n  - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.\n  - Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.\n  - Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n  - Update for functional issues. Refer to [Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications](https://cdrdv2.intel.com/v1/dl/getContent/636674) for details.\n\n- Intel CPU Microcode was updated to 20240531 release:\n  - Update for functional issues. Refer to Intel Pentium Silver\n    and Intel Celeron Processor Specification Update\n  \n- Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)\n  - Security updates for INTEL-SA-01051 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html\n  - Security updates for INTEL-SA-01052 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html\n  - Security updates for INTEL-SA-01036 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html\n  - Update for functional issues. Refer to 5th Gen Intel Xeon Processor Scalable Family https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.\n  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.\n  - Update for functional issues. Refer to 14th 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.\n  - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.\n  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.\n\n- - Intel CPU Microcode was updated to 20240312 release. (bsc#1221323)\n  - Security updates for INTEL-SA-INTEL-SA-00972 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html\n  - Security updates for INTEL-SA-INTEL-SA-00982 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html\n  - Security updates for INTEL-SA-INTEL-SA-00898 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html\n  - Security updates for INTEL-SA-INTEL-SA-00960 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html\n  - Security updates for INTEL-SA-INTEL-SA-01045 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html\n  - Update for functional issues. Refer to Intel Core Ultra Processor https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.\n  - Update for functional issues. Refer to 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.\n  - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.\n  - Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123 for details.\n  - Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/341079 for details.\n  - Update for functional issues. Refer to 10th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/615213 for details.\n  - Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.\n  - Update for functional issues. Refer to 8th Generation Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338025 for details.\n  - Update for functional issues. Refer to 7th and 8th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/334663 for details.\n  - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.\n  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.\n  - Update for functional issues. Refer to 3rd Generation Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634897 for details.\n  - Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.\n  - Update for functional issues. Refer to 2nd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338848 for details.\n  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.\n  - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071 for details.\n  - Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update  https://cdrdv2.intel.com/v1/dl/getContent/709192 for details.\n  - Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/613537 for details.\n  - Update for functional issues. Refer to Intel Atom C3000 Processor Product Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336345 for details.\n  - Update for functional issues. Refer to Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications https://cdrdv2.intel.com/v1/dl/getContent/636674 for details.\n  - Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336562 for details.\n  - Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634542 for details.\n  \n- Intel CPU Microcode was updated to 20231114 release. (bsc#1215278)\n  - Security updates for [INTEL-SA-00950](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html)\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n  - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n \n- Intel CPU Microcode was updated to 20231114 pre-release (labeled 20231113). (bsc#1215278)\n\n- Intel CPU Microcode was updated to 20230808 release. (bsc#1214099)\n  - Security updates for [INTEL-SA-00828](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html) (bsc#1206418)\n  - Security updates for [INTEL-SA-00836](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html)\n  - Security updates for [INTEL-SA-00837](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html)\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n  - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.\n  - Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.\n  - Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n  - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n  - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.\n  - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n  - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-2100 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338854) for details.\n  \n- Intel CPU Microcode was updated to 20230613 release.\n  \n- Intel CPU Microcode was updated to 20230512 release.\n    \n- Intel CPU Microcode was updated to 20230512 release. (bsc#1211382)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-1032,SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2025-1032",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_1032-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:1032-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-20251032-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:1032-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-March/020609.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1206418",
        "url": "https://bugzilla.suse.com/1206418"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1211382",
        "url": "https://bugzilla.suse.com/1211382"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1214099",
        "url": "https://bugzilla.suse.com/1214099"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1215278",
        "url": "https://bugzilla.suse.com/1215278"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1221323",
        "url": "https://bugzilla.suse.com/1221323"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1224277",
        "url": "https://bugzilla.suse.com/1224277"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1229129",
        "url": "https://bugzilla.suse.com/1229129"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1230400",
        "url": "https://bugzilla.suse.com/1230400"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1233313",
        "url": "https://bugzilla.suse.com/1233313"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1237096",
        "url": "https://bugzilla.suse.com/1237096"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-40982 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-40982/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-41804 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-41804/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22655 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22655/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-23583 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-23583/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-23908 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-23908/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-28746 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-28746/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-38575 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-38575/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-39368 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-39368/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-42667 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-42667/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-43490 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-43490/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-45733 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-45733/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-45745 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-45745/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-46103 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-46103/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-47855 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-47855/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-49141 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-49141/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21820 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21820/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21853 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-23918 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-23918/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-23984 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-23984/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-24853 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-24853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-24968 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-24968/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-24980 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-24980/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-25939 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-25939/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-31068 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-31068/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-36293 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-36293/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-37020 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-37020/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-39355 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-39355/"
      }
    ],
    "title": "Security update for microcode_ctl",
    "tracking": {
      "current_release_date": "2025-03-26T14:22:25Z",
      "generator": {
        "date": "2025-03-26T14:22:25Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:1032-1",
      "initial_release_date": "2025-03-26T14:22:25Z",
      "revision_history": [
        {
          "date": "2025-03-26T14:22:25Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-1.17-102.83.81.1.i586",
                "product": {
                  "name": "microcode_ctl-1.17-102.83.81.1.i586",
                  "product_id": "microcode_ctl-1.17-102.83.81.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-1.17-102.83.81.1.x86_64",
                "product": {
                  "name": "microcode_ctl-1.17-102.83.81.1.x86_64",
                  "product_id": "microcode_ctl-1.17-102.83.81.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles_ltss-extreme-core:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-1.17-102.83.81.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
          "product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        },
        "product_reference": "microcode_ctl-1.17-102.83.81.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-40982",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-40982"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-40982",
          "url": "https://www.suse.com/security/cve/CVE-2022-40982"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1206418 for CVE-2022-40982",
          "url": "https://bugzilla.suse.com/1206418"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215674 for CVE-2022-40982",
          "url": "https://bugzilla.suse.com/1215674"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-40982"
    },
    {
      "cve": "CVE-2022-41804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-41804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-41804",
          "url": "https://www.suse.com/security/cve/CVE-2022-41804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1214099 for CVE-2022-41804",
          "url": "https://bugzilla.suse.com/1214099"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215580 for CVE-2022-41804",
          "url": "https://bugzilla.suse.com/1215580"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-41804"
    },
    {
      "cve": "CVE-2023-22655",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22655"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22655",
          "url": "https://www.suse.com/security/cve/CVE-2023-22655"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-22655",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-22655"
    },
    {
      "cve": "CVE-2023-23583",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-23583"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-23583",
          "url": "https://www.suse.com/security/cve/CVE-2023-23583"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215278 for CVE-2023-23583",
          "url": "https://bugzilla.suse.com/1215278"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1220178 for CVE-2023-23583",
          "url": "https://bugzilla.suse.com/1220178"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-23583"
    },
    {
      "cve": "CVE-2023-23908",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-23908"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-23908",
          "url": "https://www.suse.com/security/cve/CVE-2023-23908"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1214099 for CVE-2023-23908",
          "url": "https://bugzilla.suse.com/1214099"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-23908"
    },
    {
      "cve": "CVE-2023-28746",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-28746"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-28746",
          "url": "https://www.suse.com/security/cve/CVE-2023-28746"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1213456 for CVE-2023-28746",
          "url": "https://bugzilla.suse.com/1213456"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-28746",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-28746"
    },
    {
      "cve": "CVE-2023-38575",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-38575"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-38575",
          "url": "https://www.suse.com/security/cve/CVE-2023-38575"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-38575",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-38575"
    },
    {
      "cve": "CVE-2023-39368",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-39368"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable denial of service via network access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-39368",
          "url": "https://www.suse.com/security/cve/CVE-2023-39368"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-39368",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-39368"
    },
    {
      "cve": "CVE-2023-42667",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-42667"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-42667",
          "url": "https://www.suse.com/security/cve/CVE-2023-42667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2023-42667",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-42667"
    },
    {
      "cve": "CVE-2023-43490",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-43490"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allow a privileged user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-43490",
          "url": "https://www.suse.com/security/cve/CVE-2023-43490"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-43490",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-43490"
    },
    {
      "cve": "CVE-2023-45733",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-45733"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-45733",
          "url": "https://www.suse.com/security/cve/CVE-2023-45733"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224277 for CVE-2023-45733",
          "url": "https://bugzilla.suse.com/1224277"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-45733"
    },
    {
      "cve": "CVE-2023-45745",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-45745"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-45745",
          "url": "https://www.suse.com/security/cve/CVE-2023-45745"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224277 for CVE-2023-45745",
          "url": "https://bugzilla.suse.com/1224277"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.9,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-45745"
    },
    {
      "cve": "CVE-2023-46103",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-46103"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-46103",
          "url": "https://www.suse.com/security/cve/CVE-2023-46103"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224277 for CVE-2023-46103",
          "url": "https://bugzilla.suse.com/1224277"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-46103"
    },
    {
      "cve": "CVE-2023-47855",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-47855"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-47855",
          "url": "https://www.suse.com/security/cve/CVE-2023-47855"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224277 for CVE-2023-47855",
          "url": "https://bugzilla.suse.com/1224277"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-47855"
    },
    {
      "cve": "CVE-2023-49141",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-49141"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-49141",
          "url": "https://www.suse.com/security/cve/CVE-2023-49141"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2023-49141",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-49141"
    },
    {
      "cve": "CVE-2024-21820",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21820"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21820",
          "url": "https://www.suse.com/security/cve/CVE-2024-21820"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1233313 for CVE-2024-21820",
          "url": "https://bugzilla.suse.com/1233313"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-21820"
    },
    {
      "cve": "CVE-2024-21853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21853",
          "url": "https://www.suse.com/security/cve/CVE-2024-21853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1233313 for CVE-2024-21853",
          "url": "https://bugzilla.suse.com/1233313"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-21853"
    },
    {
      "cve": "CVE-2024-23918",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-23918"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-23918",
          "url": "https://www.suse.com/security/cve/CVE-2024-23918"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1233313 for CVE-2024-23918",
          "url": "https://bugzilla.suse.com/1233313"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-23918"
    },
    {
      "cve": "CVE-2024-23984",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-23984"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-23984",
          "url": "https://www.suse.com/security/cve/CVE-2024-23984"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230400 for CVE-2024-23984",
          "url": "https://bugzilla.suse.com/1230400"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-23984"
    },
    {
      "cve": "CVE-2024-24853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-24853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-24853",
          "url": "https://www.suse.com/security/cve/CVE-2024-24853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-24853",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-24853"
    },
    {
      "cve": "CVE-2024-24968",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-24968"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to potentially enable a denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-24968",
          "url": "https://www.suse.com/security/cve/CVE-2024-24968"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230400 for CVE-2024-24968",
          "url": "https://bugzilla.suse.com/1230400"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-24968"
    },
    {
      "cve": "CVE-2024-24980",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-24980"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-24980",
          "url": "https://www.suse.com/security/cve/CVE-2024-24980"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-24980",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-24980"
    },
    {
      "cve": "CVE-2024-25939",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-25939"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-25939",
          "url": "https://www.suse.com/security/cve/CVE-2024-25939"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-25939",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-25939"
    },
    {
      "cve": "CVE-2024-31068",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-31068"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-31068",
          "url": "https://www.suse.com/security/cve/CVE-2024-31068"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237096 for CVE-2024-31068",
          "url": "https://bugzilla.suse.com/1237096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-31068"
    },
    {
      "cve": "CVE-2024-36293",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-36293"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-36293",
          "url": "https://www.suse.com/security/cve/CVE-2024-36293"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237096 for CVE-2024-36293",
          "url": "https://bugzilla.suse.com/1237096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-36293"
    },
    {
      "cve": "CVE-2024-37020",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-37020"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sequence of processor instructions leads to unexpected behavior in the Intel(R) DSA V1.0 for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-37020",
          "url": "https://www.suse.com/security/cve/CVE-2024-37020"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237096 for CVE-2024-37020",
          "url": "https://bugzilla.suse.com/1237096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-37020"
    },
    {
      "cve": "CVE-2024-39355",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-39355"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper handling of physical or environmental conditions in some Intel(R) Processors may allow an authenticated user to enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-39355",
          "url": "https://www.suse.com/security/cve/CVE-2024-39355"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237096 for CVE-2024-39355",
          "url": "https://bugzilla.suse.com/1237096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-39355"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for ucode-intel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for ucode-intel fixes the following issues:\n\n- Intel CPU Microcode was updated to the 20240813 release (bsc#1229129)\n  - CVE-2024-24853: Security updates for [INTEL-SA-01083](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html)\n  - CVE-2024-25939: Security updates for [INTEL-SA-01118](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html)\n  - CVE-2024-24980: Security updates for [INTEL-SA-01100](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html)\n  - CVE-2023-42667: Security updates for [INTEL-SA-01038](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html)\n  - CVE-2023-49141: Security updates for [INTEL-SA-01046](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html)\n  Other issues fixed:\n  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n  - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n  - Update for functional issues. Refer to [10th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.\n  - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.\n  - Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.\n  - Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n  - Update for functional issues. Refer to [Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications](https://cdrdv2.intel.com/v1/dl/getContent/636674) for details.\n Updated Platforms:\n  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products\n  |:---------------|:---------|:------------|:---------|:---------|:---------\n  | AML-Y22        | H0       | 06-8e-09/10 | 000000f4 | 000000f6 | Core Gen8 Mobile\n  | AML-Y42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile\n  | CFL-H          | R0       | 06-9e-0d/22 | 000000fc | 00000100 | Core Gen9 Mobile\n  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9\n  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f6 | 000000f8 | Core Gen8 Desktop, Mobile, Xeon E\n  | CFL-S          | B0       | 06-9e-0b/02 | 000000f4 | 000000f6 | Core Gen8\n  | CFL-S          | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9 Desktop\n  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f4 | 000000f6 | Core Gen8 Mobile\n  | CLX-SP         | B1       | 06-55-07/bf | 05003605 | 05003707 | Xeon Scalable Gen2\n  | CML-H          | R1       | 06-a5-02/20 | 000000fa | 000000fc | Core Gen10 Mobile\n  | CML-S102       | Q0       | 06-a5-05/22 | 000000fa | 000000fc | Core Gen10\n  | CML-S62        | G1       | 06-a5-03/22 | 000000fa | 000000fc | Core Gen10\n  | CML-U42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile\n  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000fa | 000000fe | Core Gen10 Mobile\n  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000fa | 000000fc | Core Gen10 Mobile\n  | CML-Y42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile\n  | CPX-SP         | A1       | 06-55-0b/bf | 07002802 | 07002904 | Xeon Scalable Gen3\n  | EHL            | B1       | 06-96-01/01 | 00000019 | 0000001a | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E\n  | ICL-D          | B0       | 06-6c-01/10 | 01000290 | 010002b0 | Xeon D-17xx, D-27xx\n  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000c4 | 000000c6 | Core Gen10 Mobile\n  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003d1 | 0d0003e7 | Xeon Scalable Gen3\n  | KBL-R U        | Y0       | 06-8e-0a/c0 | 000000f4 | 000000f6 | Core Gen8 Mobile\n  | KBL-U23e       | J1       | 06-8e-09/c0 | 000000f4 | 000000f6 | Core Gen7 Mobile\n  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000f4 | 000000f6 | Core Gen7 Mobile\n  | MTL            | C-0      | 06-aa-04/e6 | 0000001c | 0000001e | Core Ultra Processor\n  | RKL-S          | B0       | 06-a7-01/02 | 0000005e | 00000062 | Core Gen11\n  | TGL            | B0/B1    | 06-8c-01/80 | 000000b6 | 000000b8 | Core Gen11 Mobile\n  | TGL-H          | R0       | 06-8d-01/c2 | 00000050 | 00000052 | Core Gen11 Mobile\n  | TGL-R          | C0       | 06-8c-02/c2 | 00000036 | 00000038 | Core Gen11 Mobile\n  | WHL-U          | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen8 Mobile\n  | WHL-U          | W0       | 06-8e-0b/d0 | 000000f4 | 000000f6 | Core Gen8 Mobile\n\n- update to 20240531:\n  * Update for functional issues. Refer to Intel Pentium Silver\n    and Intel Celeron Processor Specification Update\n  - Updated Platforms:\n    | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products\n    |:---------------|:---------|:------------|:---------|:---------|:---------\n    | GLK            | B0       | 06-7a-01/01 | 00000040 | 00000042 | Pentium Silver N/J5xxx, Celeron N/J4xxx\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2024-3095,SUSE-SLE-Micro-5.3-2024-3095,SUSE-SLE-Micro-5.4-2024-3095,SUSE-SLE-Micro-5.5-2024-3095,SUSE-SLE-Module-Basesystem-15-SP5-2024-3095,SUSE-SLE-Module-Basesystem-15-SP6-2024-3095,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3095,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3095,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3095,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3095,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3095,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3095,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3095,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3095,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3095,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3095,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3095,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3095,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3095,SUSE-SUSE-MicroOS-5.1-2024-3095,SUSE-SUSE-MicroOS-5.2-2024-3095,SUSE-Storage-7.1-2024-3095,openSUSE-Leap-Micro-5.5-2024-3095,openSUSE-SLE-15.5-2024-3095,openSUSE-SLE-15.6-2024-3095",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_3095-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2024:3095-1",
        "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243095-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2024:3095-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2024-September/036777.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1229129",
        "url": "https://bugzilla.suse.com/1229129"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-42667 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-42667/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-49141 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-49141/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-24853 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-24853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-24980 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-24980/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-25939 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-25939/"
      }
    ],
    "title": "Security update for ucode-intel",
    "tracking": {
      "current_release_date": "2024-09-03T14:35:35Z",
      "generator": {
        "date": "2024-09-03T14:35:35Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2024:3095-1",
      "initial_release_date": "2024-09-03T14:35:35Z",
      "revision_history": [
        {
          "date": "2024-09-03T14:35:35Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20240813-150200.44.1.i586",
                "product": {
                  "name": "ucode-intel-20240813-150200.44.1.i586",
                  "product_id": "ucode-intel-20240813-150200.44.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20240813-150200.44.1.x86_64",
                "product": {
                  "name": "ucode-intel-20240813-150200.44.1.x86_64",
                  "product_id": "ucode-intel-20240813-150200.44.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.3",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.3",
                  "product_id": "SUSE Linux Enterprise Micro 5.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-micro:5.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.4",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.4",
                  "product_id": "SUSE Linux Enterprise Micro 5.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-micro:5.4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.5",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.5",
                  "product_id": "SUSE Linux Enterprise Micro 5.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-micro:5.5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Proxy 4.3",
                "product": {
                  "name": "SUSE Manager Proxy 4.3",
                  "product_id": "SUSE Manager Proxy 4.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-proxy:4.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Server 4.3",
                "product": {
                  "name": "SUSE Manager Server 4.3",
                  "product_id": "SUSE Manager Server 4.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-server:4.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.1",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.1",
                  "product_id": "SUSE Linux Enterprise Micro 5.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-microos:5.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.2",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.2",
                  "product_id": "SUSE Linux Enterprise Micro 5.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-microos:5.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 7.1",
                "product": {
                  "name": "SUSE Enterprise Storage 7.1",
                  "product_id": "SUSE Enterprise Storage 7.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:7.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap Micro 5.5",
                "product": {
                  "name": "openSUSE Leap Micro 5.5",
                  "product_id": "openSUSE Leap Micro 5.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap-micro:5.5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.5",
                "product": {
                  "name": "openSUSE Leap 15.5",
                  "product_id": "openSUSE Leap 15.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.6",
                "product": {
                  "name": "openSUSE Leap 15.6",
                  "product_id": "openSUSE Leap 15.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3",
          "product_id": "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4",
          "product_id": "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
          "product_id": "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Manager Proxy 4.3",
          "product_id": "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 4.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Manager Server 4.3",
          "product_id": "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Server 4.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of openSUSE Leap Micro 5.5",
          "product_id": "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap Micro 5.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-150200.44.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-150200.44.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-42667",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-42667"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-42667",
          "url": "https://www.suse.com/security/cve/CVE-2023-42667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2023-42667",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-09-03T14:35:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-42667"
    },
    {
      "cve": "CVE-2023-49141",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-49141"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-49141",
          "url": "https://www.suse.com/security/cve/CVE-2023-49141"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2023-49141",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-09-03T14:35:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-49141"
    },
    {
      "cve": "CVE-2024-24853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-24853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-24853",
          "url": "https://www.suse.com/security/cve/CVE-2024-24853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-24853",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-09-03T14:35:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-24853"
    },
    {
      "cve": "CVE-2024-24980",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-24980"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-24980",
          "url": "https://www.suse.com/security/cve/CVE-2024-24980"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-24980",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-09-03T14:35:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-24980"
    },
    {
      "cve": "CVE-2024-25939",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-25939"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
          "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
          "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-25939",
          "url": "https://www.suse.com/security/cve/CVE-2024-25939"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-25939",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Proxy 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "SUSE Manager Server 4.3:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.5:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap 15.6:ucode-intel-20240813-150200.44.1.x86_64",
            "openSUSE Leap Micro 5.5:ucode-intel-20240813-150200.44.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-09-03T14:35:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-25939"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for ucode-intel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for ucode-intel fixes the following issues:\n\n- Intel CPU Microcode was updated to the 20240813 release (bsc#1229129)\n  - CVE-2024-24853: Security updates for [INTEL-SA-01083](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html)\n  - CVE-2024-25939: Security updates for [INTEL-SA-01118](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html)\n  - CVE-2024-24980: Security updates for [INTEL-SA-01100](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html)\n  - CVE-2023-42667: Security updates for [INTEL-SA-01038](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html)\n  - CVE-2023-49141: Security updates for [INTEL-SA-01046](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html)\n  Other issues fixed:\n  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n  - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n  - Update for functional issues. Refer to [10th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.\n  - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.\n  - Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.\n  - Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n  - Update for functional issues. Refer to [Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications](https://cdrdv2.intel.com/v1/dl/getContent/636674) for details.\n Updated Platforms:\n  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products\n  |:---------------|:---------|:------------|:---------|:---------|:---------\n  | AML-Y22        | H0       | 06-8e-09/10 | 000000f4 | 000000f6 | Core Gen8 Mobile\n  | AML-Y42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile\n  | CFL-H          | R0       | 06-9e-0d/22 | 000000fc | 00000100 | Core Gen9 Mobile\n  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9\n  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f6 | 000000f8 | Core Gen8 Desktop, Mobile, Xeon E\n  | CFL-S          | B0       | 06-9e-0b/02 | 000000f4 | 000000f6 | Core Gen8\n  | CFL-S          | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9 Desktop\n  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f4 | 000000f6 | Core Gen8 Mobile\n  | CLX-SP         | B1       | 06-55-07/bf | 05003605 | 05003707 | Xeon Scalable Gen2\n  | CML-H          | R1       | 06-a5-02/20 | 000000fa | 000000fc | Core Gen10 Mobile\n  | CML-S102       | Q0       | 06-a5-05/22 | 000000fa | 000000fc | Core Gen10\n  | CML-S62        | G1       | 06-a5-03/22 | 000000fa | 000000fc | Core Gen10\n  | CML-U42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile\n  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000fa | 000000fe | Core Gen10 Mobile\n  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000fa | 000000fc | Core Gen10 Mobile\n  | CML-Y42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile\n  | CPX-SP         | A1       | 06-55-0b/bf | 07002802 | 07002904 | Xeon Scalable Gen3\n  | EHL            | B1       | 06-96-01/01 | 00000019 | 0000001a | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E\n  | ICL-D          | B0       | 06-6c-01/10 | 01000290 | 010002b0 | Xeon D-17xx, D-27xx\n  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000c4 | 000000c6 | Core Gen10 Mobile\n  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003d1 | 0d0003e7 | Xeon Scalable Gen3\n  | KBL-R U        | Y0       | 06-8e-0a/c0 | 000000f4 | 000000f6 | Core Gen8 Mobile\n  | KBL-U23e       | J1       | 06-8e-09/c0 | 000000f4 | 000000f6 | Core Gen7 Mobile\n  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000f4 | 000000f6 | Core Gen7 Mobile\n  | MTL            | C-0      | 06-aa-04/e6 | 0000001c | 0000001e | Core Ultra Processor\n  | RKL-S          | B0       | 06-a7-01/02 | 0000005e | 00000062 | Core Gen11\n  | TGL            | B0/B1    | 06-8c-01/80 | 000000b6 | 000000b8 | Core Gen11 Mobile\n  | TGL-H          | R0       | 06-8d-01/c2 | 00000050 | 00000052 | Core Gen11 Mobile\n  | TGL-R          | C0       | 06-8c-02/c2 | 00000036 | 00000038 | Core Gen11 Mobile\n  | WHL-U          | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen8 Mobile\n  | WHL-U          | W0       | 06-8e-0b/d0 | 000000f4 | 000000f6 | Core Gen8 Mobile\n\n- update to 20240531:\n  * Update for functional issues. Refer to Intel Pentium Silver\n    and Intel Celeron Processor Specification Update\n  - Updated Platforms:\n    | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products\n    |:---------------|:---------|:------------|:---------|:---------|:---------\n    | GLK            | B0       | 06-7a-01/01 | 00000040 | 00000042 | Pentium Silver N/J5xxx, Celeron N/J4xxx\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2024-2941,SUSE-SLE-SERVER-12-SP5-2024-2941",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_2941-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2024:2941-1",
        "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20242941-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2024:2941-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2024-August/036482.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1229129",
        "url": "https://bugzilla.suse.com/1229129"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-42667 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-42667/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-49141 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-49141/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-24853 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-24853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-24980 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-24980/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-25939 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-25939/"
      }
    ],
    "title": "Security update for ucode-intel",
    "tracking": {
      "current_release_date": "2024-08-16T11:07:44Z",
      "generator": {
        "date": "2024-08-16T11:07:44Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2024:2941-1",
      "initial_release_date": "2024-08-16T11:07:44Z",
      "revision_history": [
        {
          "date": "2024-08-16T11:07:44Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20240813-140.1.i586",
                "product": {
                  "name": "ucode-intel-20240813-140.1.i586",
                  "product_id": "ucode-intel-20240813-140.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20240813-140.1.x86_64",
                "product": {
                  "name": "ucode-intel-20240813-140.1.x86_64",
                  "product_id": "ucode-intel-20240813-140.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-140.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-140.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-140.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-140.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-42667",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-42667"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-42667",
          "url": "https://www.suse.com/security/cve/CVE-2023-42667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2023-42667",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-16T11:07:44Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-42667"
    },
    {
      "cve": "CVE-2023-49141",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-49141"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-49141",
          "url": "https://www.suse.com/security/cve/CVE-2023-49141"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2023-49141",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-16T11:07:44Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-49141"
    },
    {
      "cve": "CVE-2024-24853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-24853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-24853",
          "url": "https://www.suse.com/security/cve/CVE-2024-24853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-24853",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-16T11:07:44Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-24853"
    },
    {
      "cve": "CVE-2024-24980",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-24980"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-24980",
          "url": "https://www.suse.com/security/cve/CVE-2024-24980"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-24980",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-16T11:07:44Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-24980"
    },
    {
      "cve": "CVE-2024-25939",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-25939"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-25939",
          "url": "https://www.suse.com/security/cve/CVE-2024-25939"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-25939",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240813-140.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240813-140.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-16T11:07:44Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-25939"
    }
  ]
}

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access."
    },
    {
      "lang": "es",
      "value": " El fallo del mecanismo de protecci\u00f3n en algunos procesadores Intel(R) Xeon(R) de tercera, cuarta y quinta generaci\u00f3n puede permitir que un usuario privilegiado habilite potencialmente la escalada de privilegios a trav\u00e9s del acceso local."
    }
  ],
  "id": "CVE-2024-24980",
  "lastModified": "2024-08-14T17:49:14.177",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 6.1,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 4.7,
        "source": "secure@intel.com",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "HIGH",
          "attackRequirements": "PRESENT",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 6.9,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "HIGH",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "LOW",
          "subIntegrityImpact": "HIGH",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "secure@intel.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-08-14T14:15:22.117",
  "references": [
    {
      "source": "secure@intel.com",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-693"
        }
      ],
      "source": "secure@intel.com",
      "type": "Secondary"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "ucode-intel-20240813-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the ucode-intel-20240813-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-14268",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14268-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-42667 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-42667/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-49141 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-49141/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-24853 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-24853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-24980 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-24980/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-25939 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-25939/"
      }
    ],
    "title": "ucode-intel-20240813-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-08-15T00:00:00Z",
      "generator": {
        "date": "2024-08-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:14268-1",
      "initial_release_date": "2024-08-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-08-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20240813-1.1.aarch64",
                "product": {
                  "name": "ucode-intel-20240813-1.1.aarch64",
                  "product_id": "ucode-intel-20240813-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20240813-1.1.ppc64le",
                "product": {
                  "name": "ucode-intel-20240813-1.1.ppc64le",
                  "product_id": "ucode-intel-20240813-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20240813-1.1.s390x",
                "product": {
                  "name": "ucode-intel-20240813-1.1.s390x",
                  "product_id": "ucode-intel-20240813-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20240813-1.1.x86_64",
                "product": {
                  "name": "ucode-intel-20240813-1.1.x86_64",
                  "product_id": "ucode-intel-20240813-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64"
        },
        "product_reference": "ucode-intel-20240813-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le"
        },
        "product_reference": "ucode-intel-20240813-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x"
        },
        "product_reference": "ucode-intel-20240813-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-42667",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-42667"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-42667",
          "url": "https://www.suse.com/security/cve/CVE-2023-42667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2023-42667",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-42667"
    },
    {
      "cve": "CVE-2023-49141",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-49141"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-49141",
          "url": "https://www.suse.com/security/cve/CVE-2023-49141"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2023-49141",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-49141"
    },
    {
      "cve": "CVE-2024-24853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-24853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-24853",
          "url": "https://www.suse.com/security/cve/CVE-2024-24853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-24853",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-24853"
    },
    {
      "cve": "CVE-2024-24980",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-24980"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-24980",
          "url": "https://www.suse.com/security/cve/CVE-2024-24980"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-24980",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-24980"
    },
    {
      "cve": "CVE-2024-25939",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-25939"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-25939",
          "url": "https://www.suse.com/security/cve/CVE-2024-25939"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-25939",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-25939"
    }
  ]
}

{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-24980"
      ],
      "id": "GSD-2024-24980",
      "modified": "2024-02-28T06:02:31.177206Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2024-24980",
        "STATE": "RESERVED"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
          }
        ]
      }
    }
  }
}

{
  "affected": [],
  "aliases": [
    "CVE-2024-24980"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-693"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-08-14T14:15:22Z",
    "severity": "MODERATE"
  },
  "details": "Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.",
  "id": "GHSA-w5qf-7xgv-ggv8",
  "modified": "2024-08-14T15:31:15Z",
  "published": "2024-08-14T15:31:15Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24980"
    },
    {
      "type": "WEB",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Der Prozessor ist das zentrale Rechenwerk eines Computers.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Prozessor ausnutzen, um seine Privilegien zu erh\u00f6hen und um einen Denial-of-Service-Zustand zu erzeugen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-1845 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1845.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-1845 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1845"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory vom 2024-08-13",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory vom 2024-08-13",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2024-308 vom 2024-08-13",
        "url": "https://www.dell.com/support/kbdoc/de-de/000227762/dsa-2024-308-security-update-for-dell-poweredge-server-for-intel-august-2024-security-advisories-2024-3-ipu"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2024-243 vom 2024-08-13",
        "url": "https://www.dell.com/support/kbdoc/de-de/000225475/dsa-2024-243"
      },
      {
        "category": "external",
        "summary": "Lenovo Security Advisory LEN-164067 vom 2024-08-14",
        "url": "https://support.lenovo.com/us/en/product_security/LEN-164067"
      },
      {
        "category": "external",
        "summary": "Fujitsu Product Security vom 2024-08-15",
        "url": "https://security.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-FJ-ISS-2024-050711-Security-Advisory.asp?lng=com"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin vom 2024-08-14",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04682en_us\u0026docLocale=en_US"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:2941-1 vom 2024-08-16",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-August/019216.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6967-1 vom 2024-08-20",
        "url": "https://ubuntu.com/security/notices/USN-6967-1"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2024-319 vom 2024-08-27",
        "url": "https://www.dell.com/support/kbdoc/de-de/000227002/dsa-2024-319"
      },
      {
        "category": "external",
        "summary": "HP Security Bulletin HPSBHF03967 vom 2024-08-26",
        "url": "https://support.hp.com/de-de/document/ish_11104597-11105578-16/HPSBHF03967"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2024-5C5C384FA7 vom 2024-08-29",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-5c5c384fa7"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2024-DCA1B54441 vom 2024-08-29",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-dca1b54441"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2024-67A38B081A vom 2024-08-29",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-67a38b081a"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3095-1 vom 2024-09-03",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-September/019365.html"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2024-397 vom 2024-10-03",
        "url": "https://www.dell.com/support/kbdoc/de-de/000231954/dsa-2024-397-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2024-2682 vom 2024-11-01",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2024-2682.html"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin vom 2025-02-04",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04779en_us\u0026docLocale=en_US"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:1032-1 vom 2025-03-26",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-March/020609.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Intel Prozessor: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-03-26T23:00:00.000+00:00",
      "generator": {
        "date": "2025-03-27T09:14:00.425+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2024-1845",
      "initial_release_date": "2024-08-13T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-08-13T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-08-14T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Fujitsu und HP aufgenommen"
        },
        {
          "date": "2024-08-18T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-08-19T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-08-27T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2024-08-28T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von HP aufgenommen"
        },
        {
          "date": "2024-08-29T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2024-09-03T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-10-03T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2024-10-31T23:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2025-02-04T23:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von HP aufgenommen"
        },
        {
          "date": "2025-03-26T23:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von SUSE aufgenommen"
        }
      ],
      "status": "final",
      "version": "12"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell BIOS",
            "product": {
              "name": "Dell BIOS",
              "product_id": "T032770",
              "product_identification_helper": {
                "cpe": "cpe:/h:dell:bios:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Dell Computer",
            "product": {
              "name": "Dell Computer",
              "product_id": "T006498",
              "product_identification_helper": {
                "cpe": "cpe:/o:dell:dell_computer:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Dell PowerEdge",
            "product": {
              "name": "Dell PowerEdge",
              "product_id": "T036715",
              "product_identification_helper": {
                "cpe": "cpe:/h:dell:poweredge:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "OneFS",
                "product": {
                  "name": "Dell PowerScale OneFS",
                  "product_id": "T034610",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:powerscale_onefs:onefs"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "PowerScale"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74185",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fujitsu BIOS",
            "product": {
              "name": "Fujitsu BIOS",
              "product_id": "T027696",
              "product_identification_helper": {
                "cpe": "cpe:/a:fujitsu:bios:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fujitsu"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HP Computer",
            "product": {
              "name": "HP Computer",
              "product_id": "T032786",
              "product_identification_helper": {
                "cpe": "cpe:/h:hp:computer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HP"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "HPE ProLiant",
                "product": {
                  "name": "HPE ProLiant",
                  "product_id": "T009310",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hp:proliant:-"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "HPE ProLiant",
                "product": {
                  "name": "HPE ProLiant",
                  "product_id": "T027712",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hp:proliant:-"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "ProLiant"
          },
          {
            "category": "product_name",
            "name": "HPE Synergy",
            "product": {
              "name": "HPE Synergy",
              "product_id": "T027711",
              "product_identification_helper": {
                "cpe": "cpe:/h:hpe:synergy:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HPE"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Xeon Scalable",
                "product": {
                  "name": "Intel Prozessor Xeon Scalable",
                  "product_id": "T036821",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:intel:intel_prozessor:xeon_scalable"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Xeon D",
                "product": {
                  "name": "Intel Prozessor Xeon D",
                  "product_id": "T036822",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:intel:intel_prozessor:xeon_d"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Prozessor"
          }
        ],
        "category": "vendor",
        "name": "Intel"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Lenovo Computer",
            "product": {
              "name": "Lenovo Computer",
              "product_id": "T036869",
              "product_identification_helper": {
                "cpe": "cpe:/h:lenovo:computer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Lenovo"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-24980",
      "product_status": {
        "known_affected": [
          "T006498",
          "T032786",
          "T036715",
          "T036869",
          "T034610",
          "T036821",
          "T036822",
          "74185",
          "T032770",
          "T002207",
          "T000126",
          "T027711",
          "T027712",
          "398363",
          "T027696",
          "T009310"
        ]
      },
      "release_date": "2024-08-13T22:00:00.000+00:00",
      "title": "CVE-2024-24980"
    },
    {
      "cve": "CVE-2024-25939",
      "product_status": {
        "known_affected": [
          "T006498",
          "T032786",
          "T036715",
          "T036869",
          "T034610",
          "T036821",
          "74185",
          "T032770",
          "T002207",
          "T000126",
          "T027711",
          "T027712",
          "398363",
          "T027696",
          "T009310"
        ]
      },
      "release_date": "2024-08-13T22:00:00.000+00:00",
      "title": "CVE-2024-25939"
    }
  ]
}