CVE-2024-21823 | THREATINT

Assigner	intel
Reserved	2024-01-24
Published	2024-05-16
Updated	2024-05-16

Description

Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors may allow an authorized user to potentially enable denial of service via local access.

MEDIUM: 6.4

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H

Problem types

denial of service

Hardware Logic with Insecure De-Synchronization between Control and Data Channels

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01084.html

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/

http://www.openwall.com/lists/oss-security/2024/05/15/1

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/

cve.org CVE-2024-21823

nvd.nist.gov CVE-2024-21823

Download JSON