CVE-2024-31068 — Improper Finite State Machines (FSMs) in Hardware Logic in Intel-microcode

CWE-1245 — Improper Finite State Machines (FSMs) in Hardware Logic9 documents6 sources
Severity
5.6MEDIUMNVD
EPSS
0.0%
top 96.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Debian Intel-microcode
Timeline
PublishedFeb 12
Latest updateFeb 24

Description

Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via local access.

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Packages1 packages

▶debiandebian/intel-microcode< intel-microcode 3.20250211.1~deb12u1 (bookworm)

🔴Vulnerability Details

4
OSV
intel-microcode vulnerabilities↗2025-02-24
▶
OSV
intel-microcode vulnerabilities↗2025-02-17
▶
GHSA
GHSA-vgrj-w768-vh7r: Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service↗2025-02-13
▶
OSV
CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service↗2025-02-12
▶

📋Vendor Advisories

4
Ubuntu
Intel Microcode vulnerabilities↗2025-02-24
▶
Ubuntu
Intel Microcode vulnerabilities↗2025-02-17
▶
Red Hat
kernel: microcode_ctl: From CVEorg collector↗2025-02-12
▶
Debian
CVE-2024-31068: intel-microcode - Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Proces...↗2024
▶