Input validation error in Intel products - CVE-2024-39355

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU107010

Input validation error in Intel products - CVE-2024-39355

Published: April 4, 2025


Vulnerability identifier: #VU107010
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-39355
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper handling of physical or environmental conditions in Intel processors. A local user can perform a denial of service (DoS) attack.


Affected software

Intel Core i9 processor 14900
Intel Core i7 processor 14701E
Intel Core i9 processor 14901E
Intel Core i5 processor 14600KF
Intel Core i5 processor 14600K
Intel Core i7 processor 14700KF
Intel Core i7 processor 14700K
Intel Core i7 processor 14700F
Intel Core i7 processor 14700
Intel Core i9 processor 14900KF
Intel Core i9 processor 14900F
Intel Core i9 processor 14900KS
Intel Core i9 processor 14900K
Intel Core i9 processor 13900KS
Intel Core i5 processor 13600KF
Intel Core i5 processor 13600K
Intel Core i7 processor 13700
Intel Core i7 processor 13700F
Intel Core i7 processor 13790F
Intel Core i7 processor 13700KF
Intel Core i7 processor 13700K
Intel Core i9 processor 13900E
Intel Core i9 processor 13900
Intel Core i9 processor 13900F
Intel Core i9 processor 13900KF
Intel Core i9 processor 13900K
Precision 3280 CFF
Alienware M18 R2
Precision 3680 Tower
Inspiron 3030
Inspiron 3030S
OptiPlex Micro 7020
OptiPlex SFF 7020
OptiPlex Tower 7020
Vostro 3030
Vostro 3030S
OptiPlex AIO 7420
Alienware Aurora R15
Precision 7680
Precision 7780
OptiPlex Small Form Factor 7010 / OptiPlex Small Form Factor Plus 7010
OptiPlex Tower 7010 / OptiPlex Tower Plus 7010
OptiPlex Micro 7010 / OptiPlex Micro Plus 7010
OptiPlex All-in-One 7410
Dell G15 5530
Inspiron 3020 Small Desktop
Inspiron 3020 Desktop
Dell G16 7630
ChengMing 3910/3911
Vostro 3020 Small Desktop
Vostro 3020 Tower Desktop
Alienware m18 R1
Alienware m16 R1
XPS 8960
AURORA R16
Precision 3660
Precision 3260 XE Compact / Precision 3260 Compact
Precision 3460 XE Small Form Factor / Precision 3460 Small Form Factor
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
Basesystem Module
openSUSE Leap
openEuler
Fedora
microcode_ctl
ucode-intel-debuginfo
ucode-intel
ucode-intel-debugsource
PowerProtect Data Manager

How to mitigate CVE-2024-39355

Install updates from vendor's website.

Precision 3280 CFF - update to 1.10.0
Alienware M18 R2 - update to 1.11.0
Precision 3680 Tower - update to 1.11.1
Inspiron 3030 - update to 1.12.0
Inspiron 3030S - update to 1.12.0
OptiPlex Micro 7020 - update to 1.12.0
OptiPlex SFF 7020 - update to 1.12.0
OptiPlex Tower 7020 - update to 1.12.0
Vostro 3030 - update to 1.12.0
Vostro 3030S - update to 1.12.0
OptiPlex AIO 7420 - update to 1.12.1
Alienware Aurora R15 - update to 1.18.0
Precision 7680 - update to 1.19.2
Precision 7780 - update to 1.19.2
OptiPlex Small Form Factor 7010 / OptiPlex Small Form Factor Plus 7010 - update to 1.22.0
OptiPlex Tower 7010 / OptiPlex Tower Plus 7010 - update to 1.22.0
OptiPlex Micro 7010 / OptiPlex Micro Plus 7010 - update to 1.22.0
OptiPlex All-in-One 7410 - update to 1.22.0
Dell G15 5530 - update to 1.22.0
Inspiron 3020 Small Desktop - update to 1.22.0
Inspiron 3020 Desktop - update to 1.22.0
Dell G16 7630 - update to 1.22.0
ChengMing 3910/3911 - update to 1.22.0
Vostro 3020 Small Desktop - update to 1.22.0
Vostro 3020 Tower Desktop - update to 1.22.0
Alienware m18 R1 - update to 1.24.0
Alienware m16 R1 - update to 1.24.0
microcode_ctl - addressed in versions 2.1-61.6.fc40, 2.1-67.1.fc41
XPS 8960 - update to 2.13.0
AURORA R16 - update to 2.14.0
Precision 3660 - update to 2.22.0
Precision 3260 XE Compact / Precision 3260 Compact - update to 3.12.0
Precision 3460 XE Small Form Factor / Precision 3460 Small Form Factor - update to 3.12.0
PowerProtect Data Manager - update to 19.19.0-15
microcode_ctl - update to 20250211-1
ucode-intel-debuginfo - update to 20250211-149.2
ucode-intel - addressed in versions 20250211-149.2, 20250211-150200.53.1
ucode-intel-debugsource - update to 20250211-149.2

External References

Related Security Bulletins