Red Hat Security Advisory

RHSA-2020:5190

microcode_ctl security, bug fix, and enhancement update

Released 2020-11-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) microcode_ctl-2:2.1-53.13.el7_7
Red Hat Enterprise Linux Server EUS (v. 7.7) microcode_ctl-2:2.1-53.13.el7_7

Fixes 3 records

TI-2020-06970 CVE-2020-8698 · GHSA-9636-925v-53qr

Exposure of resource to wrong sphere in Intel Processors

LOW 25

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00516 Published 2020-11-12 Partial fix CWE-668

TI-2020-06969 CVE-2020-8696 · GHSA-qrq2-q88f-xpv2

Improper removal of sensitive information before storage or transfer in some Intel(R)…

LOW 25

Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00444 Published 2020-11-12 Partial fix CWE-212

TI-2020-06968 CVE-2020-8695 · GHSA-55fx-92rr-h42r

Observable discrepancy in Intel Processors

LOW 25

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00419 Published 2020-11-12 Fixed CWE-203