vulnerability

Oracle Linux: CVE-2020-0548: ELSA-2020-2431: microcode_ctl security, bug fix and enhancement update (MODERATE) (Multiple Advisories)

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Published
Jan 27, 2020
Added
Jun 12, 2020
Modified
Dec 3, 2025

Description

Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
A flaw was found in Intel processors where a local attacker is able to gain information about registers used for vector calculations by observing register states from other processes running on the system. This results in a race condition where store buffers, which were not cleared, could be read by another process or a CPU sibling. The highest threat from this vulnerability is data confidentiality where an attacker could read arbitrary data as it passes through the processor.

Solution

oracle-linux-upgrade-microcode-ctl
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.