CVE-2024-21853 — Improper Finite State Machines (FSMs) in Hardware Logic in Intel-microcode

CWE-1245 — Improper Finite State Machines (FSMs) in Hardware Logic7 documents6 sources
Severity
5.7MEDIUMNVD
OSV8.5
EPSS
0.0%
top 90.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Debian Intel-microcode
Timeline
PublishedNov 13
Latest updateDec 11

Description

Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access.

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Packages1 packages

▶debiandebian/intel-microcode< intel-microcode 3.20241112.1~deb12u1 (bookworm)

🔴Vulnerability Details

3
OSV
intel-microcode vulnerabilities↗2024-12-11
▶
OSV
CVE-2024-21853: Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authorized user to↗2024-11-13
▶
GHSA
GHSA-f58g-ghv3-pqv3: Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authorized user to↗2024-11-13
▶

📋Vendor Advisories

3
Ubuntu
Intel Microcode vulnerabilities↗2024-12-11
▶
Red Hat
kernel: microcode_ctl: From CVEorg collector↗2024-11-13
▶
Debian
CVE-2024-21853: intel-microcode - Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th ...↗2024
▶