The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2303 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

    * hw: information disclosure on some Intel Atom processors (CVE-2020-24513)

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20210525 release

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1931-1 advisory.

    Updated to Intel CPU Microcode 20210608 release.

      - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom     processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)

        See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html

      - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel     vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of     the root (host) (INTEL-SA-00464 bsc#1179836)

        See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

      - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to     changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)

        See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

      - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-     SA-00442 bsc#1179839)

        See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html

    Other fixes:

    - Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family     Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
    - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family     Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
    - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
    - Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec     Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-     update.html) for details.
    - Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification     Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
    - Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification     Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-     update.html?wapkw=processor+spec+update+e5) for details.
    - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification     Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-     specification-update.html) for details.
    - Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec     Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-     update.html) for details.
    - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families     Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-     update.html) for details.
    - Update for functional issues. Refer to [6th Gen Intel Processor Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
    - Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification     Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for     details.
    - Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification     Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-     update.html) for details.

    - New platforms:

    | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products     |:---------------|:---------|:------------|:---------|:---------|:---------     | CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2     | ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3     | ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3     | SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB     | SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB     | TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile     | TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile     | TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile     | EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron     J6412/J6413/N6210/N6211, Atom x6000E     | JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron     N4500/N4505/N5100/N5105     | RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11

    - Updated platforms:

    | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products     |:---------------|:---------|:------------|:---------|:---------|:---------     | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3     | HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3     | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile     | SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile     | BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx     | SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable     | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable     | SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx     | CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2     | CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2     | CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3     | BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48,     Pentium D1507/08/09/17/19     | BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87     | BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53     | APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom     x5/7-E39xx     | APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx     | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5     | DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series     | GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx     | GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron     J4125/J4025/N4020/N4120     | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile     | LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology     | AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile     | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile     | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile     | WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile     | AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile     | CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile     | WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile     | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6     | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E     | CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8     | CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9     | CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile     | CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile     | CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10     | CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10     | CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile     | CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2308 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

    * hw: information disclosure on some Intel Atom processors (CVE-2020-24513)

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20210525 release

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:2308 advisory.

  - hw: vt-d related privilege escalation (CVE-2020-24489)

  - hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

  - hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

  - hw: information disclosure on some Intel Atom processors (CVE-2020-24513)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3317 advisory.

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: Information disclosure issue in Intel SGX via RAPL interface     (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors     (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors     (CVE-2020-24512)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3364 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: Information disclosure issue in Intel SGX via RAPL interface     (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors     (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors     (CVE-2020-24512)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3322 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: Information disclosure issue in Intel SGX via RAPL interface     (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors     (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors     (CVE-2020-24512)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2305:11 advisory.

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)
      * hw: Vector Register Data Sampling (CVE-2020-0548)
      * hw: L1D Cache Eviction Sampling (CVE-2020-0549)
      * hw: vt-d related privilege escalation (CVE-2020-24489)
      * hw: improper isolation of shared resources in some Intel Processors     (CVE-2020-24511)
      * hw: observable timing discrepancy in some Intel Processors     (CVE-2020-24512)
      * hw: Information disclosure issue in Intel SGX via RAPL interface     (CVE-2020-8695)
      * hw: Vector Register Leakage-Active (CVE-2020-8696)
      * hw: Fast forward store predictor (CVE-2020-8698)     CVE-2020-0543     Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access.
    CVE-2020-0548     Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable     information disclosure via local access.
    CVE-2020-0549     Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user     to potentially enable information disclosure via local access.
    CVE-2020-24489     Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access.
    CVE-2020-24511     Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access.
    CVE-2020-24512     Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access.
    CVE-2020-8695     Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access.
    CVE-2020-8696     Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access.
    CVE-2020-8698     Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-2021_3027 advisory.

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors     (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors     (CVE-2020-24512)

    * hw: Information disclosure issue in Intel SGX via RAPL interface     (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    This advisory is provided by Ctrl IQ, Inc for Rocky Linux systems. For more information about CIQ security     practices, visit https://ciq.com/security.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
150390	RHEL 7 : microcode_ctl (RHSA-2021:2303)	Nessus	Red Hat Local Security Checks	2021/6/9	2024/11/7	high
150737	SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2021:1931-1)	Nessus	SuSE Local Security Checks	2021/6/12	2026/6/25	high
150810	RHEL 8 : microcode_ctl (RHSA-2021:2308)	Nessus	Red Hat Local Security Checks	2021/6/16	2025/3/6	high
150831	CentOS 8 : microcode_ctl (CESA-2021:2308)	Nessus	CentOS Local Security Checks	2021/6/16	2021/7/2	high
152926	RHEL 7 : microcode_ctl (RHSA-2021:3317)	Nessus	Red Hat Local Security Checks	2021/8/31	2024/11/7	high
152930	RHEL 8 : microcode_ctl (RHSA-2021:3364)	Nessus	Red Hat Local Security Checks	2021/9/1	2024/11/7	high
152955	RHEL 7 : microcode_ctl (RHSA-2021:3322)	Nessus	Red Hat Local Security Checks	2021/9/1	2024/11/8	high
294721	MiracleLinux 7 : microcode_ctl-2.1-73.11.el7 (AXSA:2021-2305:11)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
357926	Rocky Linux 8 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (crlsa-2021_3027)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high

検出

プラグインの検索

high

high

high

high

high

high

high

high

high