CVE-2024-23984

Public on 2024-09-11
Modified on 2024-09-11
Description

NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html
NOTE: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240910
DEBIANBUG: [1081363]

Severity
Medium
See what this means
CVSS v3 Base Score
5.3
See breakdown

Affected Packages

Platform Package Release Date Advisory
Amazon Linux 1 microcode_ctl 2024-10-31 ALAS-2024-1950
Amazon Linux 2 - Core microcode_ctl 2024-11-01 ALAS2-2024-2682
Amazon Linux 2023 microcode_ctl 2024-10-31 ALAS2023-2024-748

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
NVD CVSSv3 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2024-23984 Mitre: CVE-2024-23984