Improper finite state machines in hardware logic in Intel products - CVE-2024-21853

Vulnerability identifier: #VU101936

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-21853

CWE-ID: CWE-1245

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an error in hardware logic. A local unprivileged user can perform a denial of service (DoS) attack.

4th Generation Intel Xeon Scalable Processors
4th Generation Intel Xeon Platinum processors
4th Generation Intel Xeon Gold Processors
4th Generation Intel Xeon Silver Processors
4th Generation Intel Xeon Bronze Processors
4th Generation Intel Xeon Scalable Processors with Intel vRAN
Intel Xeon W Processors
Precision 7960 Tower
Precision 5860 Tower
Precision 7960 XL Rack
HPE ProLiant DL320 Gen11 Server
HPE ProLiant DL360 Gen11 Server
HPE ProLiant DL380 Gen11 Server
HPE ProLiant DL380a Gen11
HPE ProLiant DL560 Gen11
HPE ProLiant ML110 Gen11
HPE ProLiant ML350 Gen11 Server
HPE Compute Edge Server e930t
HPE Synergy 480 Gen11 Compute Module
HPE ProLiant DL110 Gen11
HPE Alletra 4140
HPE Alletra 4120
HPE Alletra 4110
HPE StoreEasy 1670 Storage
HPE StoreEasy 1670 Performance Storage
HPE StoreEasy 1870 Storage
HPE StoreEasy 1870 Performance Storage
HPE SimpliVity 380 Gen11
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Server 12 SP5 LTSS
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Fedora
APEX Cloud Platform for Microsoft Azure
Precision 7960 Rack
HPE StoreEasy 1570 Performance
HPE StoreEasy 1570 Storage
HPE StoreEasy 1470 Storage
HPE StoreEasy 1470 Performance
Dell EMC VxRail Appliance
intel-microcode (Ubuntu package)
microcode_ctl
ucode-intel
ucode-intel-debugsource
ucode-intel-debuginfo
APEX Cloud Platform for Red Hat OpenShift
Apstra

Install updates from vendor's website.

APEX Cloud Platform for Microsoft Azure - update to 01.04.00.00
Dell EMC VxRail Appliance - update to 7.0.540
intel-microcode (Ubuntu package) - addressed in versions Ubuntu Pro, 3.20241112.0ubuntu0.20.04.1, 3.20241112.0ubuntu0.22.04.1, 3.20241112.0ubuntu0.24.04.1, 3.20241112.0ubuntu0.24.10.1
microcode_ctl - addressed in versions 2.1-58.5.fc39, 2.1-61.5.fc40, 2.1-67.fc41
Precision 7960 Tower - update to 2.2.9
Precision 5860 Tower - update to 2.2.9
Precision 7960 XL Rack - update to 2.4.4
Precision 7960 Rack - update to 2.4.4
HPE ProLiant DL320 Gen11 Server - update to 2.30_08-09-2024
HPE StoreEasy 1570 Performance - update to 2.30_08-09-2024
HPE ProLiant DL360 Gen11 Server - update to 2.30_08-09-2024
HPE ProLiant DL380 Gen11 Server - update to 2.30_08-09-2024
HPE ProLiant DL380a Gen11 - update to 2.30_08-09-2024
HPE ProLiant DL560 Gen11 - update to 2.30_08-09-2024
HPE ProLiant ML110 Gen11 - update to 2.30_08-09-2024
HPE ProLiant ML350 Gen11 Server - update to 2.30_08-09-2024
HPE Compute Edge Server e930t - update to 2.30_08-09-2024
HPE Synergy 480 Gen11 Compute Module - update to 2.30_08-09-2024
HPE StoreEasy 1570 Storage - update to 2.30_08-09-2024
HPE StoreEasy 1470 Storage - update to 2.30_08-09-2024
HPE StoreEasy 1470 Performance - update to 2.30_08-09-2024
HPE ProLiant DL110 Gen11 - update to 2.30_08-09-2024
HPE Alletra 4140 - update to 2.30_08-09-2024
HPE Alletra 4120 - update to 2.30_08-09-2024
HPE Alletra 4110 - update to 2.30_08-09-2024
HPE StoreEasy 1670 Storage - update to 2.30_08-09-2024
HPE StoreEasy 1670 Performance Storage - update to 2.30_08-09-2024
HPE StoreEasy 1870 Storage - update to 2.30_08-09-2024
HPE StoreEasy 1870 Performance Storage - update to 2.30_08-09-2024
APEX Cloud Platform for Red Hat OpenShift - update to 03.03.00.00
Apstra - update to 6.0.0
HPE SimpliVity 380 Gen11 - update to 2024_1129
microcode_ctl - update to 20241112-1
ucode-intel - addressed in versions 20241112-146.1, 20241112-150200.50.1
ucode-intel-debugsource - update to 20241112-146.1
ucode-intel-debuginfo - update to 20241112-146.1

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html

• Local denial of service in Intel Xeon processors
• SUSE update for ucode-intel
• SUSE update for ucode-intel
• Ubuntu update for intel-microcode
• Fedora 39 update for microcode_ctl
• Fedora 40 update for microcode_ctl
• Fedora 41 update for microcode_ctl
• openEuler update for microcode_ctl
• Multiple vulnerabilities in Dell APEX Cloud Platform for Red Hat OpenShift
• Multiple vulnerabilities in Dell Precision Rack BIOS for Intel Xeon Processor and Intel TDX Module
• Improper finite state machines in hardware logic in Dell Precision Tower
• Improper finite state machines in hardware logic in HPE SimpliVity 380 Gen11
• Improper finite state machines in hardware logic in HPE ProLiant DL/ML, Alletra, Synergy, and Edgeline Servers Using Certain Intel Processors
• Dell VxRail Appliance 7.x update for third-party components
• APEX Cloud Platform for Microsoft Azure update for third-party components
• Improper finite state machines in hardware logic in Certain HPE StoreEasy Servers Using Certain Intel Processors
• Juniper Apstra update for Intel-microcode package