Input validation error in Intel products - CVE-2024-31068

Vulnerability identifier: #VU104106

CSH Severity: Low

CVSS v4: 5.6 [CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-31068

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper Finite State Machines (FSMs) in Hardware Logic. A local administrator can pass specially crafted input to the application and perform a denial of service (DoS) attack.

12th Generation Intel Core Processors
13th Generation Intel Core Processors
14th Generation Intel Core Processors
4th Generation Intel Xeon Scalable Processors
5th Generation Intel Xeon Scalable processors
PowerEdge MX760c
PowerEdge R860
PowerEdge R960
PowerEdge HS5610
PowerEdge HS5620
PowerEdge C6620
PowerEdge R760
PowerEdge R660
PowerEdge R660xs
PowerEdge R760xs
PowerEdge R760xd2
PowerEdge T560
Dell XC Core XC760xa
Dell XC Core XC660xs
Dell XC Core XC760
Dell XC Core XC660
PowerEdge XE9640
PowerEdge XE8640
PowerEdge XR7620
PowerEdge XR8620t
PowerEdge XR8610t
PowerEdge XR5610
PowerEdge XE9680
PowerEdge R760xa
OptiPlex 7400 All-In-One
OptiPlex 5400 All-In-One
PowerEdge T160
PowerEdge R360
PowerEdge R260
PowerEdge T360
Inspiron 24 5430 All-in-One
Vostro 16 5640
Inspiron 16 5640
Inspiron 27 7730 All-in-One
Latitude 5450
Inspiron 14 5440
Latitude 7350
Vostro 14 3440
Latitude 3550
Inspiron 14 7440 2-in-1
Latitude 3450
Precision 3280 CFF
Latitude 7650
Latitude 7450
Alienware M18 R2
Precision 3680 Tower
Inspiron 16 Plus 7640
Latitude 7030 Rugged Extreme
Inspiron 14 Plus 7440
Inspiron 3030
Inspiron 3030S
Vostro 3030
Vostro 3030S
OptiPlex Tower 7020
OptiPlex SFF 7020
OptiPlex Micro 7020
OptiPlex AIO 7420
Vostro 14 3430
XPS 17 9730
Inspiron 15 3530
Precision 5480
Vostro 15 3530
Precision 5680
Inspiron 27 7720 All-in-One
Latitude 9440 2-in-1
Inspiron 24 5420 All-in-One
Latitude 3340
Latitude 5340
Latitude 3440
Latitude 3540
XPS 15 9530
Precision 3580
Precision 7780
Alienware Aurora R15
Latitude 5540
Precision 3581
Precision 7680
Vostro 16 5630
Alienware x14 R2
Alienware x16 R1
Latitude 7340
Inspiron 14 5430
Inspiron 14 7430 2-in-1
Inspiron 14 Plus 7430
Inspiron 16 5630
Inspiron 16 Plus 7630
Inspiron 16 7630 2-in-1
Latitude 7440
Latitude 7640
Latitude 5440
Precision 3480
Inspiron 13 5330
Latitude 7230 Rugged Extreme
ChengMing 3910/3911
XPS 9315 2-in-1
OptiPlex Tower 7010 / OptiPlex Tower Plus 7010
OptiPlex Small Form Factor 7010 / OptiPlex Small Form Factor Plus 7010
Inspiron 3020 Small Desktop
Inspiron 3020 Desktop
Vostro 3020 Tower Desktop
Vostro 3020 Small Desktop
OptiPlex All-in-One 7410
OptiPlex Micro 7010 / OptiPlex Micro Plus 7010
Dell G15 5530
Dell G16 7630
Alienware x14
Inspiron 13 5320
Alienware Aurora R13
Vostro 5320
XPS 8950
Alienware m16 R1
Alienware m18 R1
Inspiron 14 7420 2-in-1
Inspiron 16 7620 2-in-1
Latitude 3430
Latitude 3530
Alienware x17 R2
Alienware x15 R2
Latitude 9330
Inspiron 5410 All-In-One
Inspiron 7710 All-in-One
Precision 7670
Inspiron 14 5420
Inspiron 16 5620
Precision 7770
Latitude 5430
Vostro 5620
Latitude 3330
Precision 5470
Vostro 3710
Vostro 3910
Vostro 7620
Precision 3570
XPS 13 9315
Latitude 5530
OptiPlex XE4 Tower
ChengMing 3900
Inspiron 14 Plus 7420
Inspiron 16 Plus 7620
Inspiron 3910
Latitude 5330
Latitude 5431
OptiPlex XE4 SFF
OptiPlex 7000 Micro / OptiPlex 7000 Small Form Factor / OptiPlex 7000 Tower / OptiPlex 7000 XE Micro
OptiPlex 3000 Micro / OptiPlex 3000 Small Form Factor / OptiPlex 3000 Tower
Precision 3470
OptiPlex 5000 Micro / OptiPlex 5000 Small Form Factor / OptiPlex 5000 Tower
Latitude 9430
Precision 3571
Latitude 5531
Latitude 7330
Latitude 7430
Latitude 7530
XPS 15 9520
Precision 5570
Alienware m15 R7
XPS 17 9720
Dell G16 7620
Dell G15 5520
Vostro 15 3520
Vostro 14 3420
Precision 5770
Inspiron 15 3520
XPS 8960
AURORA R16
XPS 13 Plus 9320
XPS 9320
Precision 3660
HPE StoreEasy 1870 Storage
HPE StoreEasy 1670 Performance Storage
HPE StoreEasy 1670 Storage
HPE StoreEasy 1870 Performance Storage
Precision 3460 XE Small Form Factor / Precision 3460 Small Form Factor
Precision 3260 XE Compact / Precision 3260 Compact
Intel Core Ultra processor
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Fedora
intel-microcode (Ubuntu package)
microcode_ctl
ucode-intel-debuginfo
ucode-intel
ucode-intel-debugsource
Dell Data Lakehouse
Dell Integrated System for Microsoft Azure Stack Hub 16G
APEX Cloud Platform for Microsoft Azure
HPE StoreEasy 1570 Storage
HPE StoreEasy 1570 Performance
HPE StoreEasy 1470 Storage
HPE StoreEasy 1470 Performance
APEX Cloud Platform for Red Hat OpenShift
PowerProtect Data Manager

Install updates from vendor's website.

intel-microcode (Ubuntu package) - addressed in versions Ubuntu Pro, 3.20250211.0ubuntu0.20.04.1, 3.20250211.0ubuntu0.22.04.1, 3.20250211.0ubuntu0.24.04.1, 3.20250211.0ubuntu0.24.10.1
OptiPlex 7400 All-In-One - update to 1.1.44
OptiPlex 5400 All-In-One - update to 1.1.44
Dell Data Lakehouse - update to 1.4.0.0
APEX Cloud Platform for Microsoft Azure - update to 01.05.01.00
PowerEdge T160 - update to 1.5.3
PowerEdge R360 - update to 1.5.3
PowerEdge R260 - update to 1.5.3
PowerEdge T360 - update to 1.5.3
Inspiron 24 5430 All-in-One - update to 1.7.0
Vostro 16 5640 - update to 1.7.0
Inspiron 16 5640 - update to 1.7.0
Inspiron 27 7730 All-in-One - update to 1.7.0
Latitude 5450 - update to 1.8.0
Inspiron 14 5440 - update to 1.8.0
Latitude 7350 - update to 1.8.0
Vostro 14 3440 - update to 1.8.0
Latitude 3550 - update to 1.8.0
Inspiron 14 7440 2-in-1 - update to 1.8.0
Latitude 3450 - update to 1.8.0
Precision 3280 CFF - update to 1.8.0
Latitude 7650 - update to 1.8.1
Latitude 7450 - update to 1.8.1
Alienware M18 R2 - update to 1.9.0
Precision 3680 Tower - update to 1.9.0
Inspiron 16 Plus 7640 - update to 1.10.0
Latitude 7030 Rugged Extreme - update to 1.10.0
Inspiron 14 Plus 7440 - update to 1.10.0
Inspiron 3030 - update to 1.10.0
Inspiron 3030S - update to 1.10.0
Vostro 3030 - update to 1.10.0
Vostro 3030S - update to 1.10.0
OptiPlex Tower 7020 - update to 1.10.0
OptiPlex SFF 7020 - update to 1.10.0
OptiPlex Micro 7020 - update to 1.10.0
OptiPlex AIO 7420 - update to 1.10.0
Vostro 14 3430 - update to 1.15.0
XPS 17 9730 - update to 1.15.0
Inspiron 15 3530 - update to 1.15.0
Precision 5480 - update to 1.15.0
Vostro 15 3530 - update to 1.15.0
Precision 5680 - update to 1.15.0
Inspiron 27 7720 All-in-One - update to 1.15.1
Latitude 9440 2-in-1 - update to 1.15.1
Inspiron 24 5420 All-in-One - update to 1.15.1
Latitude 3340 - update to 1.17.0
Latitude 5340 - update to 1.17.0
Latitude 3440 - update to 1.17.0
Latitude 3540 - update to 1.17.0
XPS 15 9530 - update to 1.17.0
Precision 3580 - update to 1.17.0
Precision 7780 - update to 1.17.0
Alienware Aurora R15 - update to 1.17.0
Latitude 5540 - update to 1.17.0
Precision 3581 - update to 1.17.0
Precision 7680 - update to 1.17.0
Vostro 16 5630 - update to 1.18.0
Alienware x14 R2 - update to 1.18.0
Alienware x16 R1 - update to 1.18.0
Latitude 7340 - update to 1.18.0
Inspiron 14 5430 - update to 1.18.0
Inspiron 14 7430 2-in-1 - update to 1.18.0
Inspiron 14 Plus 7430 - update to 1.18.0
Inspiron 16 5630 - update to 1.18.0
Inspiron 16 Plus 7630 - update to 1.18.0
Inspiron 16 7630 2-in-1 - update to 1.18.0
Latitude 7440 - update to 1.18.1
Latitude 7640 - update to 1.18.1
Latitude 5440 - update to 1.18.1
Precision 3480 - update to 1.18.1
Inspiron 13 5330 - update to 1.19.0
Latitude 7230 Rugged Extreme - update to 1.19.1
ChengMing 3910/3911 - update to 1.20.0
XPS 9315 2-in-1 - update to 1.20.0
OptiPlex Tower 7010 / OptiPlex Tower Plus 7010 - update to 1.20.0
OptiPlex Small Form Factor 7010 / OptiPlex Small Form Factor Plus 7010 - update to 1.20.0
Inspiron 3020 Small Desktop - update to 1.20.0
Inspiron 3020 Desktop - update to 1.20.0
Vostro 3020 Tower Desktop - update to 1.20.0
Vostro 3020 Small Desktop - update to 1.20.0
OptiPlex All-in-One 7410 - update to 1.20.0
OptiPlex Micro 7010 / OptiPlex Micro Plus 7010 - update to 1.20.0
Dell G15 5530 - update to 1.21.1
Dell G16 7630 - update to 1.21.1
Alienware x14 - update to 1.22.0
Inspiron 13 5320 - update to 1.22.0
Alienware Aurora R13 - update to 1.22.0
Vostro 5320 - update to 1.22.0
XPS 8950 - update to 1.22.0
Alienware m16 R1 - update to 1.22.1
Alienware m18 R1 - update to 1.22.1
Inspiron 14 7420 2-in-1 - update to 1.23.0
Inspiron 16 7620 2-in-1 - update to 1.23.0
Latitude 3430 - update to 1.23.0
Latitude 3530 - update to 1.23.0
Alienware x17 R2 - update to 1.23.0
Alienware x15 R2 - update to 1.23.0
Latitude 9330 - update to 1.24.0
Inspiron 5410 All-In-One - update to 1.24.1
Inspiron 7710 All-in-One - update to 1.24.1
Precision 7670 - update to 1.25.0
Inspiron 14 5420 - update to 1.25.0
Inspiron 16 5620 - update to 1.25.0
Precision 7770 - update to 1.25.0
Latitude 5430 - update to 1.25.0
Vostro 5620 - update to 1.25.0
Latitude 3330 - update to 1.25.0
Precision 5470 - update to 1.26.0
Vostro 3710 - update to 1.26.0
Vostro 3910 - update to 1.26.0
Vostro 7620 - update to 1.26.0
Precision 3570 - update to 1.26.0
XPS 13 9315 - update to 1.26.0
Latitude 5530 - update to 1.26.0
OptiPlex XE4 Tower - update to 1.26.0
ChengMing 3900 - update to 1.26.0
Inspiron 14 Plus 7420 - update to 1.26.0
Inspiron 16 Plus 7620 - update to 1.26.0
Inspiron 3910 - update to 1.26.0
Latitude 5330 - update to 1.26.0
Latitude 5431 - update to 1.26.0
OptiPlex XE4 SFF - update to 1.26.0
OptiPlex 7000 Micro / OptiPlex 7000 Small Form Factor / OptiPlex 7000 Tower / OptiPlex 7000 XE Micro - update to 1.26.0
OptiPlex 3000 Micro / OptiPlex 3000 Small Form Factor / OptiPlex 3000 Tower - update to 1.26.0
Precision 3470 - update to 1.26.0
OptiPlex 5000 Micro / OptiPlex 5000 Small Form Factor / OptiPlex 5000 Tower - update to 1.26.0
Latitude 9430 - update to 1.27.0
Precision 3571 - update to 1.27.0
Latitude 5531 - update to 1.27.0
Latitude 7330 - update to 1.27.0
Latitude 7430 - update to 1.27.0
Latitude 7530 - update to 1.27.0
XPS 15 9520 - update to 1.27.1
Precision 5570 - update to 1.27.1
Alienware m15 R7 - update to 1.28.0
XPS 17 9720 - update to 1.28.0
Dell G16 7620 - update to 1.28.0
Dell G15 5520 - update to 1.28.0
Vostro 15 3520 - update to 1.28.0
Vostro 14 3420 - update to 1.28.0
Precision 5770 - update to 1.28.0
Inspiron 15 3520 - update to 1.28.0
microcode_ctl - addressed in versions 2.1-61.6.fc40, 2.1-67.1.fc41
XPS 8960 - update to 2.12.0
AURORA R16 - update to 2.13.0
XPS 13 Plus 9320 - update to 2.18.1
XPS 9320 - update to 2.18.1
Precision 3660 - update to 2.20.0
HPE StoreEasy 1870 Storage - update to 2.44_01-17-2025
HPE StoreEasy 1570 Storage - update to 2.44_01-17-2025
HPE StoreEasy 1570 Performance - update to 2.44_01-17-2025
HPE StoreEasy 1470 Storage - update to 2.44_01-17-2025
HPE StoreEasy 1670 Performance Storage - update to 2.44_01-17-2025
HPE StoreEasy 1470 Performance - update to 2.44_01-17-2025
HPE StoreEasy 1670 Storage - update to 2.44_01-17-2025
HPE StoreEasy 1870 Performance Storage - update to 2.44_01-17-2025
APEX Cloud Platform for Red Hat OpenShift - update to 03.04.01.00
Precision 3460 XE Small Form Factor / Precision 3460 Small Form Factor - update to 3.10.0
Precision 3260 XE Compact / Precision 3260 Compact - update to 3.10.0
PowerProtect Data Manager - update to 19.19.0-15
Dell Integrated System for Microsoft Azure Stack Hub 16G - update to 2502
microcode_ctl - update to 20250211-1
ucode-intel-debuginfo - update to 20250211-149.2
ucode-intel - addressed in versions 20250211-149.2, 20250211-150200.53.1
ucode-intel-debugsource - update to 20250211-149.2

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html

• Denial of service in Intel Processors
• Ubuntu update for intel-microcode
• Ubuntu update for intel-microcode
• Fedora 40 update for microcode_ctl
• Fedora 41 update for microcode_ctl
• openEuler update for microcode_ctl
• SUSE update for ucode-intel
• SUSE update for ucode-intel
• Multiple vulnerabilities in Dell PowerProtect Data Manager
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• Dell Client Platform for Intel CPU firmware (2024.4 IPU)
• Dell PowerEdge Server update for Intel CPU firmware (2024.4 IPU)
• Multiple vulnerabilities in Dell Integrated System
• Dell Data Lakehouse update for third-party components
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Input validation error in Certain HPE StoreEasy Servers Using Certain Intel Processor BIOS