Intel Firmware Vulnerability INTEL-SA-00464: CVE-2020-24511/24512 Information Disclosure

Critical Vulnerability Information Vulnerability Overview Intel ID: INTEL-SA-00464 Advisory Category: Firmware Impact of vulnerability: Information Disclosure Severity rating: MEDIUM Original release: 06/08/2021 Last revised: 06/08/2021 Vulnerability Details 1. CVEID: CVE-2020-24511 - Description: Improper isolation of shared resources in certain Intel(R) processors may allow a locally-accessible authenticated user to potentially enable information disclosure. - CVSS Base Score: 5.6 Medium - CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N 2. CVEID: CVE-2020-24512 - Description: Observable timing differences in certain Intel(R) processors may allow a locally-accessible authenticated user to potentially enable information disclosure. - CVSS Base Score: 2.8 Low - CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N Affected Products See the list of affected products here. Recommendations Intel recommends that users of affected Intel® processors update to the latest firmware versions provided by their system manufacturers to address these issues. Intel has released microcode updates for currently supported affected Intel® processors. For details on microcode access, refer to the public GitHub repository: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files Acknowledgments Intel thanks Travis Downs for reporting the CVE-2020-24512 issue. Intel thanks Joseph Nuzman for reporting the CVE-2020-24511 issue.

Goal Reached Thanks to every supporter — we hit 100%!

Intel Firmware Vulnerability INTEL-SA-00464: CVE-2020-24511/24512 Information Disclosure