{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for microcode_ctl",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for microcode_ctl fixes the following issues:\n\n - CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware\n     Logic for some Intel Processors may allow privileged user to\n     potentially enable denial of service via local access. (bsc#1237096)\n - CVE-2024-36293: A potential security vulnerability in some Intel\n     Software Guard Extensions (Intel SGX) Platforms may allow denial\n     of service. Intel is releasing microcode updates to mitigate this\n     potential vulnerability. (bsc#1237096)\n - CVE-2024-39355: A potential security vulnerability in some\n     13th and 14th Generation Intel Core Processors may allow denial\n     of service. Intel is releasing microcode and UEFI reference code\n     updates to mitigate this potential vulnerability. (bsc#1237096)\n - CVE-2024-37020: A potential security vulnerability in the Intel\n     Data Streaming Accelerator (Intel DSA) for some Intel Xeon Processors\n     may allow denial of service. Intel is releasing software updates to\n     mitigate this potential vulnerability. (bsc#1237096)\n - CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic\n     in some 4th and 5th Generation Intel Xeon Processors may allow an\n     authorized user to potentially enable denial of service via local access. (bsc#1233313) \n - CVE-2024-23918: Improper conditions check in some Intel Xeon processor\n     memory controller configurations when using Intel SGX may allow a\n     privileged user to potentially enable escalation of privilege via\n     local access. (bsc#1233313)\n - CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor\n     memory controller configurations when using Intel SGX may allow a privileged\n     user to potentially enable escalation of privilege via local access. (bsc#1233313)\n - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in\n     some Intel Processors may allow an privileged user to potentially enable a\n     denial of service via local access. (bsc#1230400)\n - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel\n     Processors may allow a privileged user to potentially enable information\n     disclosure via local access. (bsc#1230400)\n - CVE-2024-24853: Incorrect behavior order in transition between executive\n     monitor and SMI transfer monitor (STM) in some Intel(R) Processor may\n     allow a privileged user to potentially enable escalation of privilege\n     via local access. (bsc#1229129)\n - CVE-2024-25939: Mirrored regions with different values in 3rd Generation Intel(R)\n     Xeon(R) Scalable Processors may allow a privileged user to potentially enable\n     denial of service via local access. (bsc#1229129)\n - CVE-2024-24980: Protection mechanism failure in some 3rd, 4th, and 5th Generation\n     Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable\n     escalation of privilege via local access. (bsc#1229129)\n - CVE-2023-42667: Improper isolation in the Intel(R) Core(TM) Ultra Processor stream\n     cache mechanism may allow an authenticated user to potentially enable escalation\n     of privilege via local access. (bsc#1229129)\n - CVE-2023-49141: Improper isolation in some Intel(R) Processors stream cache mechanism\n     may allow an authenticated user to potentially enable escalation of privilege via\n     local access. (bsc#1229129)\n - CVE-2023-45733: Hardware logic contains race conditions in some Intel(R) Processors\n     may allow an authenticated user to potentially enable partial information disclosure\n     via local access. (bsc#1224277)\n - CVE-2023-46103: Sequence of processor instructions leads to unexpected behavior in\n     Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially\n     enable denial of service via local access. (bsc#1224277)\n - CVE-2023-45745: Improper input validation in some Intel(R) TDX module software before\n     version 1.5.05.46.698 may allow a privileged user to potentially enable escalation\n     of privilege via local access. (bsc#1224277)\n - CVE-2023-47855: Improper input validation in some Intel(R) TDX module software before\n     version 1.5.05.46.698 may allow a privileged user to potentially enable escalation\n     of privilege via local access. (bsc#1224277)\n - CVE-2023-39368: Protection mechanism failure of bus lock regulator\n     for some Intel Processors may allow an unauthenticated user to\n     potentially enable denial of service via network access. (bsc#1221323)\n - CVE-2023-38575: Non-transparent sharing of return predictor targets\n     between contexts in some Intel Processors may allow an authorized\n     user to potentially enable information disclosure via local access. (bsc#1221323)   \n - CVE-2023-28746: Information exposure through microarchitectural\n     state after transient execution from some register files for some\n     Intel Atom Processors may allow an authenticated user to potentially\n     enable information disclosure via local access. (bsc#1221323)\n - CVE-2023-22655: Protection mechanism failure in some 3rd and 4th\n     Generation Intel Xeon Processors when using Intel SGX or Intel TDX\n     may allow a privileged user to potentially enable escalation of\n     privilege via local access. (bsc#1221323)\n - CVE-2023-43490: Incorrect calculation in microcode keying mechanism\n     for some Intel Xeon D Processors with Intel SGX may allow a\n     privileged user to potentially enable information disclosure via\n     local access.  (bsc#1221323)\n - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)\n - CVE-2022-40982: Information exposure through microarchitectural state after transient\n     execution in certain vector execution units for some Intel(R) Processors may allow\n     an authenticated user to potentially enable information disclosure via local access. (bsc#1206418) \n - CVE-2023-23908: Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable\n     processors may allow a privileged user to potentially enable information disclosure\n     via local access.\n - CVE-2022-41804: Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some\n     Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation\n     of privilege via local access.\n\nOther fixes:\n    \n- Intel CPU Microcode was updated to the 20250211 release (bsc#1237096)\n  - Security updates for INTEL-SA-01166 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html\n  - Security updates for INTEL-SA-01213 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html\n  - Security updates for INTEL-SA-01139 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html\n  - Security updates for INTEL-SA-01228 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01228.html\n  - Security updates for INTEL-SA-01194 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01194.html\n  - Update for functional issues. Refer to Intel Core Ultra Processor https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.\n  - Update for functional issues. Refer to 13th/14th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.\n  - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.\n  - Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123 for details.\n  - Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.\n  - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.\n  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.\n  - Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.\n  - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071 for details.\n  - Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/709192 for details.\n  - Update for functional issues. Refer to Intel Xeon 6700-Series Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/820922 for details.\n  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details\n\n- Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)\n  - Security updates for [INTEL-SA-01101](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html).\n  - Security updates for [INTEL-SA-01079](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html).\n  - Security updates for [INTEL-SA-01079](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html).\n  - Updated security updates for [INTEL-SA-01097](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html).\n  - Updated security updates for [INTEL-SA-01103](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html).\n  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n  - Update for functional issues. Refer to [14th/13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [5th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/793902) for details.\n  - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-1700 and D-1800 Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714069) for details\n\n- Intel CPU Microcode was updated to the 20241029 release (bsc#1230400)\n  - Update for functional issues. Refer to [14th/13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n\n- Intel CPU Microcode was updated to the 20240910 release (bsc#1230400)\n  - Security updates for [INTEL-SA-01103](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html)\n  - Security updates for [INTEL-SA-01097](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html)\n  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n\n- Intel CPU Microcode was updated to the 20240813 release (bsc#1229129)\n  - Security updates for [INTEL-SA-01083](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html)\n  - Security updates for [INTEL-SA-01118](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html)\n  - Security updates for [INTEL-SA-01100](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html)\n  - Security updates for [INTEL-SA-01038](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html)\n  - Security updates for [INTEL-SA-01046](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html)\n  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n  - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n  - Update for functional issues. Refer to [10th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.\n  - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.\n  - Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.\n  - Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n  - Update for functional issues. Refer to [Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications](https://cdrdv2.intel.com/v1/dl/getContent/636674) for details.\n\n- Intel CPU Microcode was updated to 20240531 release:\n  - Update for functional issues. Refer to Intel Pentium Silver\n    and Intel Celeron Processor Specification Update\n  \n- Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)\n  - Security updates for INTEL-SA-01051 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html\n  - Security updates for INTEL-SA-01052 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html\n  - Security updates for INTEL-SA-01036 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html\n  - Update for functional issues. Refer to 5th Gen Intel Xeon Processor Scalable Family https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.\n  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.\n  - Update for functional issues. Refer to 14th 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.\n  - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.\n  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.\n\n- - Intel CPU Microcode was updated to 20240312 release. (bsc#1221323)\n  - Security updates for INTEL-SA-INTEL-SA-00972 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html\n  - Security updates for INTEL-SA-INTEL-SA-00982 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html\n  - Security updates for INTEL-SA-INTEL-SA-00898 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html\n  - Security updates for INTEL-SA-INTEL-SA-00960 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html\n  - Security updates for INTEL-SA-INTEL-SA-01045 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html\n  - Update for functional issues. Refer to Intel Core Ultra Processor https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.\n  - Update for functional issues. Refer to 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.\n  - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.\n  - Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123 for details.\n  - Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/341079 for details.\n  - Update for functional issues. Refer to 10th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/615213 for details.\n  - Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.\n  - Update for functional issues. Refer to 8th Generation Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338025 for details.\n  - Update for functional issues. Refer to 7th and 8th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/334663 for details.\n  - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.\n  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.\n  - Update for functional issues. Refer to 3rd Generation Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634897 for details.\n  - Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.\n  - Update for functional issues. Refer to 2nd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338848 for details.\n  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.\n  - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071 for details.\n  - Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update  https://cdrdv2.intel.com/v1/dl/getContent/709192 for details.\n  - Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/613537 for details.\n  - Update for functional issues. Refer to Intel Atom C3000 Processor Product Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336345 for details.\n  - Update for functional issues. Refer to Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications https://cdrdv2.intel.com/v1/dl/getContent/636674 for details.\n  - Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336562 for details.\n  - Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634542 for details.\n  \n- Intel CPU Microcode was updated to 20231114 release. (bsc#1215278)\n  - Security updates for [INTEL-SA-00950](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html)\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n  - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n \n- Intel CPU Microcode was updated to 20231114 pre-release (labeled 20231113). (bsc#1215278)\n\n- Intel CPU Microcode was updated to 20230808 release. (bsc#1214099)\n  - Security updates for [INTEL-SA-00828](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html) (bsc#1206418)\n  - Security updates for [INTEL-SA-00836](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html)\n  - Security updates for [INTEL-SA-00837](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html)\n  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n  - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n  - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.\n  - Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.\n  - Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.\n  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n  - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n  - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.\n  - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.\n  - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n  - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n  - Update for functional issues. Refer to [Intel Xeon D-2100 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338854) for details.\n  \n- Intel CPU Microcode was updated to 20230613 release.\n  \n- Intel CPU Microcode was updated to 20230512 release.\n    \n- Intel CPU Microcode was updated to 20230512 release. (bsc#1211382)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-1032,SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2025-1032",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_1032-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:1032-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-20251032-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:1032-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-March/020609.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1206418",
        "url": "https://bugzilla.suse.com/1206418"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1211382",
        "url": "https://bugzilla.suse.com/1211382"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1214099",
        "url": "https://bugzilla.suse.com/1214099"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1215278",
        "url": "https://bugzilla.suse.com/1215278"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1221323",
        "url": "https://bugzilla.suse.com/1221323"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1224277",
        "url": "https://bugzilla.suse.com/1224277"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1229129",
        "url": "https://bugzilla.suse.com/1229129"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1230400",
        "url": "https://bugzilla.suse.com/1230400"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1233313",
        "url": "https://bugzilla.suse.com/1233313"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1237096",
        "url": "https://bugzilla.suse.com/1237096"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-40982 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-40982/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-41804 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-41804/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22655 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22655/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-23583 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-23583/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-23908 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-23908/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-28746 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-28746/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-38575 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-38575/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-39368 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-39368/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-42667 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-42667/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-43490 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-43490/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-45733 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-45733/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-45745 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-45745/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-46103 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-46103/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-47855 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-47855/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-49141 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-49141/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21820 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21820/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21853 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-23918 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-23918/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-23984 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-23984/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-24853 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-24853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-24968 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-24968/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-24980 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-24980/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-25939 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-25939/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-31068 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-31068/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-36293 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-36293/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-37020 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-37020/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-39355 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-39355/"
      }
    ],
    "title": "Security update for microcode_ctl",
    "tracking": {
      "current_release_date": "2025-03-26T14:22:25Z",
      "generator": {
        "date": "2025-03-26T14:22:25Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:1032-1",
      "initial_release_date": "2025-03-26T14:22:25Z",
      "revision_history": [
        {
          "date": "2025-03-26T14:22:25Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-1.17-102.83.81.1.i586",
                "product": {
                  "name": "microcode_ctl-1.17-102.83.81.1.i586",
                  "product_id": "microcode_ctl-1.17-102.83.81.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-1.17-102.83.81.1.x86_64",
                "product": {
                  "name": "microcode_ctl-1.17-102.83.81.1.x86_64",
                  "product_id": "microcode_ctl-1.17-102.83.81.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles_ltss-extreme-core:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-1.17-102.83.81.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
          "product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        },
        "product_reference": "microcode_ctl-1.17-102.83.81.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-40982",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-40982"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-40982",
          "url": "https://www.suse.com/security/cve/CVE-2022-40982"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1206418 for CVE-2022-40982",
          "url": "https://bugzilla.suse.com/1206418"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215674 for CVE-2022-40982",
          "url": "https://bugzilla.suse.com/1215674"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-40982"
    },
    {
      "cve": "CVE-2022-41804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-41804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-41804",
          "url": "https://www.suse.com/security/cve/CVE-2022-41804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1214099 for CVE-2022-41804",
          "url": "https://bugzilla.suse.com/1214099"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215580 for CVE-2022-41804",
          "url": "https://bugzilla.suse.com/1215580"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-41804"
    },
    {
      "cve": "CVE-2023-22655",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22655"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22655",
          "url": "https://www.suse.com/security/cve/CVE-2023-22655"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-22655",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-22655"
    },
    {
      "cve": "CVE-2023-23583",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-23583"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-23583",
          "url": "https://www.suse.com/security/cve/CVE-2023-23583"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215278 for CVE-2023-23583",
          "url": "https://bugzilla.suse.com/1215278"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1220178 for CVE-2023-23583",
          "url": "https://bugzilla.suse.com/1220178"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-23583"
    },
    {
      "cve": "CVE-2023-23908",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-23908"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-23908",
          "url": "https://www.suse.com/security/cve/CVE-2023-23908"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1214099 for CVE-2023-23908",
          "url": "https://bugzilla.suse.com/1214099"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-23908"
    },
    {
      "cve": "CVE-2023-28746",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-28746"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-28746",
          "url": "https://www.suse.com/security/cve/CVE-2023-28746"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1213456 for CVE-2023-28746",
          "url": "https://bugzilla.suse.com/1213456"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-28746",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-28746"
    },
    {
      "cve": "CVE-2023-38575",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-38575"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-38575",
          "url": "https://www.suse.com/security/cve/CVE-2023-38575"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-38575",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-38575"
    },
    {
      "cve": "CVE-2023-39368",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-39368"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable denial of service via network access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-39368",
          "url": "https://www.suse.com/security/cve/CVE-2023-39368"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-39368",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-39368"
    },
    {
      "cve": "CVE-2023-42667",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-42667"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-42667",
          "url": "https://www.suse.com/security/cve/CVE-2023-42667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2023-42667",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-42667"
    },
    {
      "cve": "CVE-2023-43490",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-43490"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allow a privileged user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-43490",
          "url": "https://www.suse.com/security/cve/CVE-2023-43490"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-43490",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-43490"
    },
    {
      "cve": "CVE-2023-45733",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-45733"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-45733",
          "url": "https://www.suse.com/security/cve/CVE-2023-45733"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224277 for CVE-2023-45733",
          "url": "https://bugzilla.suse.com/1224277"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-45733"
    },
    {
      "cve": "CVE-2023-45745",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-45745"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-45745",
          "url": "https://www.suse.com/security/cve/CVE-2023-45745"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224277 for CVE-2023-45745",
          "url": "https://bugzilla.suse.com/1224277"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.9,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-45745"
    },
    {
      "cve": "CVE-2023-46103",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-46103"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-46103",
          "url": "https://www.suse.com/security/cve/CVE-2023-46103"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224277 for CVE-2023-46103",
          "url": "https://bugzilla.suse.com/1224277"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-46103"
    },
    {
      "cve": "CVE-2023-47855",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-47855"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-47855",
          "url": "https://www.suse.com/security/cve/CVE-2023-47855"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224277 for CVE-2023-47855",
          "url": "https://bugzilla.suse.com/1224277"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-47855"
    },
    {
      "cve": "CVE-2023-49141",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-49141"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-49141",
          "url": "https://www.suse.com/security/cve/CVE-2023-49141"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2023-49141",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-49141"
    },
    {
      "cve": "CVE-2024-21820",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21820"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21820",
          "url": "https://www.suse.com/security/cve/CVE-2024-21820"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1233313 for CVE-2024-21820",
          "url": "https://bugzilla.suse.com/1233313"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-21820"
    },
    {
      "cve": "CVE-2024-21853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21853",
          "url": "https://www.suse.com/security/cve/CVE-2024-21853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1233313 for CVE-2024-21853",
          "url": "https://bugzilla.suse.com/1233313"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-21853"
    },
    {
      "cve": "CVE-2024-23918",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-23918"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-23918",
          "url": "https://www.suse.com/security/cve/CVE-2024-23918"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1233313 for CVE-2024-23918",
          "url": "https://bugzilla.suse.com/1233313"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-23918"
    },
    {
      "cve": "CVE-2024-23984",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-23984"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-23984",
          "url": "https://www.suse.com/security/cve/CVE-2024-23984"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230400 for CVE-2024-23984",
          "url": "https://bugzilla.suse.com/1230400"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-23984"
    },
    {
      "cve": "CVE-2024-24853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-24853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-24853",
          "url": "https://www.suse.com/security/cve/CVE-2024-24853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-24853",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-24853"
    },
    {
      "cve": "CVE-2024-24968",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-24968"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to potentially enable a denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-24968",
          "url": "https://www.suse.com/security/cve/CVE-2024-24968"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230400 for CVE-2024-24968",
          "url": "https://bugzilla.suse.com/1230400"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-24968"
    },
    {
      "cve": "CVE-2024-24980",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-24980"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-24980",
          "url": "https://www.suse.com/security/cve/CVE-2024-24980"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-24980",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-24980"
    },
    {
      "cve": "CVE-2024-25939",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-25939"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-25939",
          "url": "https://www.suse.com/security/cve/CVE-2024-25939"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229129 for CVE-2024-25939",
          "url": "https://bugzilla.suse.com/1229129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-25939"
    },
    {
      "cve": "CVE-2024-31068",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-31068"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-31068",
          "url": "https://www.suse.com/security/cve/CVE-2024-31068"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237096 for CVE-2024-31068",
          "url": "https://bugzilla.suse.com/1237096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-31068"
    },
    {
      "cve": "CVE-2024-36293",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-36293"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-36293",
          "url": "https://www.suse.com/security/cve/CVE-2024-36293"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237096 for CVE-2024-36293",
          "url": "https://bugzilla.suse.com/1237096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-36293"
    },
    {
      "cve": "CVE-2024-37020",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-37020"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sequence of processor instructions leads to unexpected behavior in the Intel(R) DSA V1.0 for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-37020",
          "url": "https://www.suse.com/security/cve/CVE-2024-37020"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237096 for CVE-2024-37020",
          "url": "https://bugzilla.suse.com/1237096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-37020"
    },
    {
      "cve": "CVE-2024-39355",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-39355"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper handling of physical or environmental conditions in some Intel(R) Processors may allow an authenticated user to enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-39355",
          "url": "https://www.suse.com/security/cve/CVE-2024-39355"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237096 for CVE-2024-39355",
          "url": "https://bugzilla.suse.com/1237096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-26T14:22:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-39355"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for ucode-intel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for ucode-intel fixes the following issues:\n\n- Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)\n  - CVE-2023-45733: Security updates for  INTEL-SA-01051\n  - CVE-2023-46103: Security updates for  INTEL-SA-01052\n  - CVE-2023-45745,CVE-2023-47855: Security updates for INTEL-SA-01036\n\n- Updated to Intel CPU Microcode 20240312 release. (bsc#1221323)\n  - Security updates for INTEL-SA-INTEL-SA-00972\n    - CVE-2023-39368: Protection mechanism failure of bus lock regulator\n      for some Intel Processors may allow an unauthenticated user to\n      potentially enable denial of service via network access\n  - Security updates for INTEL-SA-INTEL-SA-00982\n    - CVE-2023-38575: Non-transparent sharing of return predictor targets\n      between contexts in some Intel Processors may allow an authorized\n      user to potentially enable information disclosure via local access.\n  - Security updates for INTEL-SA-INTEL-SA-00898\n    - CVE-2023-28746: Information exposure through microarchitectural\n      state after transient execution from some register files for some\n      Intel Atom Processors may allow an authenticated user to potentially\n      enable information disclosure via local access.\n  - Security updates for INTEL-SA-INTEL-SA-00960\n    - CVE-2023-22655 Protection mechanism failure in some 3rd and 4th\n      Generation Intel Xeon Processors when using Intel SGX or Intel TDX\n      may allow a privileged user to potentially enable escalation of\n      privilege via local access.\n  - Security updates for INTEL-SA-INTEL-SA-01045\n    - CVE-2023-43490: Incorrect calculation in microcode keying mechanism\n      for some Intel Xeon D Processors with Intel SGX may allow a\n      privileged user to potentially enable information disclosure via\n      local access.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.0-22",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20020-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:20020-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202520020-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:20020-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021372.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1221323",
        "url": "https://bugzilla.suse.com/1221323"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1224277",
        "url": "https://bugzilla.suse.com/1224277"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22655 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22655/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-28746 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-28746/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-38575 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-38575/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-39368 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-39368/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-43490 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-43490/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-45733 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-45733/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-45745 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-45745/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-46103 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-46103/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-47855 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-47855/"
      }
    ],
    "title": "Security update for ucode-intel",
    "tracking": {
      "current_release_date": "2025-02-03T08:49:06Z",
      "generator": {
        "date": "2025-02-03T08:49:06Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:20020-1",
      "initial_release_date": "2025-02-03T08:49:06Z",
      "revision_history": [
        {
          "date": "2025-02-03T08:49:06Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20240813-1.1.x86_64",
                "product": {
                  "name": "ucode-intel-20240813-1.1.x86_64",
                  "product_id": "ucode-intel-20240813-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.0",
                "product": {
                  "name": "SUSE Linux Micro 6.0",
                  "product_id": "SUSE Linux Micro 6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20240813-1.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
        },
        "product_reference": "ucode-intel-20240813-1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-22655",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22655"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22655",
          "url": "https://www.suse.com/security/cve/CVE-2023-22655"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-22655",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-03T08:49:06Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-22655"
    },
    {
      "cve": "CVE-2023-28746",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-28746"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-28746",
          "url": "https://www.suse.com/security/cve/CVE-2023-28746"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1213456 for CVE-2023-28746",
          "url": "https://bugzilla.suse.com/1213456"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-28746",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-03T08:49:06Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-28746"
    },
    {
      "cve": "CVE-2023-38575",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-38575"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-38575",
          "url": "https://www.suse.com/security/cve/CVE-2023-38575"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-38575",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-03T08:49:06Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-38575"
    },
    {
      "cve": "CVE-2023-39368",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-39368"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable denial of service via network access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-39368",
          "url": "https://www.suse.com/security/cve/CVE-2023-39368"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-39368",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-03T08:49:06Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-39368"
    },
    {
      "cve": "CVE-2023-43490",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-43490"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allow a privileged user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-43490",
          "url": "https://www.suse.com/security/cve/CVE-2023-43490"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221323 for CVE-2023-43490",
          "url": "https://bugzilla.suse.com/1221323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-03T08:49:06Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-43490"
    },
    {
      "cve": "CVE-2023-45733",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-45733"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-45733",
          "url": "https://www.suse.com/security/cve/CVE-2023-45733"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224277 for CVE-2023-45733",
          "url": "https://bugzilla.suse.com/1224277"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-03T08:49:06Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-45733"
    },
    {
      "cve": "CVE-2023-45745",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-45745"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-45745",
          "url": "https://www.suse.com/security/cve/CVE-2023-45745"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224277 for CVE-2023-45745",
          "url": "https://bugzilla.suse.com/1224277"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.9,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-03T08:49:06Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-45745"
    },
    {
      "cve": "CVE-2023-46103",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-46103"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-46103",
          "url": "https://www.suse.com/security/cve/CVE-2023-46103"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224277 for CVE-2023-46103",
          "url": "https://bugzilla.suse.com/1224277"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-03T08:49:06Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-46103"
    },
    {
      "cve": "CVE-2023-47855",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-47855"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-47855",
          "url": "https://www.suse.com/security/cve/CVE-2023-47855"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224277 for CVE-2023-47855",
          "url": "https://bugzilla.suse.com/1224277"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:ucode-intel-20240813-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-03T08:49:06Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-47855"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "ProLiant ist eine Serverfamilie von Hewlett Packard Enterprise.\r\nSynergy ist eine kombinierbare Blade-Infrastruktur, die Workloads in einer Hybrid Cloud-Umgebung unterst\u00fctzt.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein lokaler Angreifer kann mehrere Schwachstellen in HPE ProLiant und HPE Synergy ausnutzen, um seine Privilegien zu erh\u00f6hen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- BIOS/Firmware",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-1294 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1294.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-1294 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1294"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin vom 2024-06-04",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04642en_us\u0026docLocale=en_US"
      }
    ],
    "source_lang": "en-US",
    "title": "HPE ProLiant: Mehrere Schwachstellen erm\u00f6glichen Privilegieneskalation",
    "tracking": {
      "current_release_date": "2024-06-04T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:09:50.510+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2024-1294",
      "initial_release_date": "2024-06-04T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-06-04T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.20_05-27-2024",
                "product": {
                  "name": "HPE ProLiant \u003c2.20_05-27-2024",
                  "product_id": "T035195"
                }
              }
            ],
            "category": "product_name",
            "name": "ProLiant"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "480 Gen11 Compute Module \u003c2.20_05-27-2024",
                "product": {
                  "name": "HPE Synergy 480 Gen11 Compute Module \u003c2.20_05-27-2024",
                  "product_id": "T035197"
                }
              }
            ],
            "category": "product_name",
            "name": "Synergy"
          }
        ],
        "category": "vendor",
        "name": "HPE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-45745",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in HPE ProLiant und HPE Synergy. Diese Fehler bestehen aufgrund einer unsachgem\u00e4\u00dfen Eingabevalidierung in der verwendeten Intel(R) TDX Modul-Software. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern."
        }
      ],
      "release_date": "2024-06-04T22:00:00.000+00:00",
      "title": "CVE-2023-45745"
    },
    {
      "cve": "CVE-2023-47855",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in HPE ProLiant und HPE Synergy. Diese Fehler bestehen aufgrund einer unsachgem\u00e4\u00dfen Eingabevalidierung in der verwendeten Intel(R) TDX Modul-Software. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern."
        }
      ],
      "release_date": "2024-06-04T22:00:00.000+00:00",
      "title": "CVE-2023-47855"
    }
  ]
}