CVE catalog

CVE-2024-21820

Intel Microcode vulnerabilities

[CVE catalog]

Severity
High · CVSS 7.2CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.22% · Oct 25, 2026

Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianintel-microcodesid3.20260227.1fixed
Debianintel-microcodeforky3.20260227.1fixed
Debianintel-microcodetrixie3.20251111.1~deb13u1fixed
Debianintel-microcodetrixie-security3.20250812.1~deb13u1fixed
Debianintel-microcodebookworm3.20251111.1~deb12u1fixed
Debianintel-microcodebookworm-security3.20250812.1~deb12u1fixed
Ubuntuintel-microcodenoble3.20241112.1~deb12u1fixed
Ubuntuintel-microcodenoble3.20241112.0ubuntu0.24.04.1fixed
Ubuntuintel-microcodepro3.20170707.1vulnerable
Ubuntuintel-microcodepro3.20171117.1vulnerable
Ubuntuintel-microcodepro3.20180108.1vulnerable
Ubuntuintel-microcodepro3.20180108.1+really20171117.1vulnerable
Ubuntuintel-microcodepro3.20180312.0~ubuntu18.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20180807a.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.18.04.3vulnerable
Ubuntuintel-microcodepro3.20190618.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20191112-0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.18.04.0vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20210216.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20210608.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20220510.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20220809.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20230214.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20230808.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20231114.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20240514.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20240813.0ubuntu0.18.04.1+esm2vulnerable
Ubuntuintel-microcodepro3.20240910.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20241112.0ubuntu0.18.04.1+esm1fixed
Ubuntuintel-microcode20.043.20190918.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu2vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu3vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.0vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20210216.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20210608.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220510.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220809.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230214.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230808.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20231114.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20240514.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20240813.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20240910.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20241112.0ubuntu0.20.04.1fixed
Ubuntuintel-microcode22.043.20210608.2ubuntu1vulnerable
Ubuntuintel-microcode22.043.20220510.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20220809.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230214.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230808.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20231114.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240514.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240813.0ubuntu0.22.04.2vulnerable
Ubuntuintel-microcode22.043.20240910.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20241112.0ubuntu0.22.04.1fixed
Ubuntuintel-microcode24.043.20230808.1vulnerable
Ubuntuintel-microcode24.043.20231114.0ubuntu1vulnerable
Ubuntuintel-microcode24.043.20231114.1vulnerable
Ubuntuintel-microcode24.043.20240312.1vulnerable
Ubuntuintel-microcode24.043.20240312.1build1vulnerable
Ubuntuintel-microcode24.043.20240514.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20240813.0ubuntu0.24.04.2vulnerable
Ubuntuintel-microcode24.043.20240910.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20241112.0ubuntu0.24.04.1fixed
Suseucode-intellinux micro 6.020241112-1.1fixed
Suseucode-intellinux micro 6.120250211-slfo.1.1_2.1fixed
Ubuntuintel-microcodepro3.20170707.1vulnerable
Ubuntuintel-microcodepro3.20171117.1vulnerable
Ubuntuintel-microcodepro3.20180108.1vulnerable
Ubuntuintel-microcodepro3.20180108.1+really20171117.1vulnerable
Ubuntuintel-microcodepro3.20180312.0~ubuntu18.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20180807a.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.18.04.3vulnerable
Ubuntuintel-microcodepro3.20190618.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20191112-0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.18.04.0vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcodepro3.20210216.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20210608.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20220510.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20220809.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20230214.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcodepro3.20230808.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20231114.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20240514.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20240813.0ubuntu0.18.04.1+esm2vulnerable
Ubuntuintel-microcodepro3.20240910.0ubuntu0.18.04.1+esm1vulnerable
Ubuntuintel-microcodepro3.20241112.0ubuntu0.18.04.1+esm1fixed
Ubuntuintel-microcode20.043.20190918.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu2vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu3vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.0vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20210216.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20210608.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220510.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20220809.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230214.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20230808.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20231114.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20240514.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20240813.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20240910.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20241112.0ubuntu0.20.04.1fixed
Ubuntuintel-microcode22.043.20210608.2ubuntu1vulnerable
Ubuntuintel-microcode22.043.20220510.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20220809.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230214.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230808.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20231114.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240514.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240813.0ubuntu0.22.04.2vulnerable
Ubuntuintel-microcode22.043.20240910.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20241112.0ubuntu0.22.04.1fixed
Ubuntuintel-microcode24.043.20230808.1vulnerable
Ubuntuintel-microcode24.043.20231114.0ubuntu1vulnerable
Ubuntuintel-microcode24.043.20231114.1vulnerable
Ubuntuintel-microcode24.043.20240312.1vulnerable
Ubuntuintel-microcode24.043.20240312.1build1vulnerable
Ubuntuintel-microcode24.043.20240514.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20240813.0ubuntu0.24.04.2vulnerable
Ubuntuintel-microcode24.043.20240910.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20241112.0ubuntu0.24.04.1fixed
Opensuseucode-inteltumbleweed20241112-1.1fixed
Suseucode-intellinux enterprise micro 5.320241112-150200.50.1fixed
Suseucode-intellinux enterprise micro 5.420241112-150200.50.1fixed
Suseucode-intellinux enterprise micro 5.520241112-150200.50.1fixed
Suseucode-intellinux enterprise module for basesystem 15 sp520241112-150200.50.1fixed
Suseucode-intellinux enterprise module for basesystem 15 sp620241112-150200.50.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp2-ltss20241112-150200.50.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp3-ltss20241112-150200.50.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp4-espos20241112-150200.50.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp4-ltss20241112-150200.50.1fixed
Suseucode-intellinux enterprise server 15 sp2-ltss20241112-150200.50.1fixed
Suseucode-intellinux enterprise server 15 sp3-ltss20241112-150200.50.1fixed
Suseucode-intellinux enterprise server 15 sp4-ltss20241112-150200.50.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp220241112-150200.50.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp320241112-150200.50.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp420241112-150200.50.1fixed
Suseucode-intelmanager proxy 4.320241112-150200.50.1fixed
Suseucode-intelmanager server 4.320241112-150200.50.1fixed
Suseucode-intellinux enterprise micro 5.120241112-150200.50.1fixed
Suseucode-intellinux enterprise micro 5.220241112-150200.50.1fixed
Suseucode-intelenterprise storage 7.120241112-150200.50.1fixed
Opensuseucode-intelleap micro 5.520241112-150200.50.1fixed
Opensuseucode-intelleap 15.520241112-150200.50.1fixed
Opensuseucode-intelleap 15.620241112-150200.50.1fixed
Suseucode-intellinux enterprise server 12 sp5-ltss20241112-146.1fixed
Suseucode-intellinux enterprise server ltss extended security 12 sp520241112-146.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianintel-microcodesourcesid3.20241112.1not yet assignedNot reported[1087532]
Debianintel-microcodesourceforky3.20241112.1not yet assignedNot reported[1087532]
Debianintel-microcodesourcetrixie3.20241112.1not yet assignedNot reported[1087532]
Debianintel-microcodesourcebookworm3.20241112.1~deb12u1not yet assignedNot reported[1087532]
Ubuntuintel-microcodedebnoble3.20241112.1~deb12u1Not reportedNot reportedNot reported
Ubuntuintel-microcodedebnoble3.20241112.0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntuintel-microcodedebpro3.20241112.0ubuntu0.18.04.1+esm1Not reportedUSN-7149-1Not reported
Ubuntuintel-microcodedeb20.043.20241112.0ubuntu0.20.04.1Not reportedUSN-7149-1Not reported
Ubuntuintel-microcodedeb22.043.20241112.0ubuntu0.22.04.1Not reportedUSN-7149-1Not reported
Ubuntuintel-microcodedeb24.043.20241112.0ubuntu0.24.04.1Not reportedUSN-7149-1Not reported
Suseucode-intelrpmlinux micro 6.020241112-1.1Not reportedSUSE-SU-2025:20092-1Not reported
Suseucode-intelrpmlinux micro 6.120250211-slfo.1.1_2.1Not reportedSUSE-SU-2025:20286-1Not reported
Ubuntuintel-microcodedebpro3.20241112.0ubuntu0.18.04.1+esm1Not reportedUBUNTU-CVE-2024-21820Not reported
Ubuntuintel-microcodedeb20.043.20241112.0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2024-21820Not reported
Ubuntuintel-microcodedeb22.043.20241112.0ubuntu0.22.04.1Not reportedUBUNTU-CVE-2024-21820Not reported
Ubuntuintel-microcodedeb24.043.20241112.0ubuntu0.24.04.1Not reportedUBUNTU-CVE-2024-21820Not reported
Opensuseucode-intelrpmtumbleweed20241112-1.1Not reportedOPENSUSE-SU-2024:14496-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.320241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.420241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.520241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise module for basesystem 15 sp520241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise module for basesystem 15 sp620241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp2-ltss20241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp3-ltss20241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp4-espos20241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp4-ltss20241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp2-ltss20241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp3-ltss20241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp4-ltss20241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp220241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp320241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp420241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmmanager proxy 4.320241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmmanager server 4.320241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.120241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.220241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmenterprise storage 7.120241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Opensuseucode-intelrpmleap micro 5.520241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Opensuseucode-intelrpmleap 15.520241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Opensuseucode-intelrpmleap 15.620241112-150200.50.1Not reportedSUSE-SU-2024:4053-1Not reported
Suseucode-intelrpmlinux enterprise server 12 sp5-ltss20241112-146.1Not reportedSUSE-SU-2024:3995-1Not reported
Suseucode-intelrpmlinux enterprise server ltss extended security 12 sp520241112-146.1Not reportedSUSE-SU-2024:3995-1Not reported

[Debian bug #1087532]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Details (1)
    • 3.20251111.1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.20241112.1~deb12u1

      usn · intel-microcode · debian · bookworm; usn · intel-microcode · debian · 12

[Debian 13 (Trixie)]

  • Details (1)
    • 3.20251111.1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.20241112.1

      usn · intel-microcode · debian · 13

[openSUSE Tumbleweed]

  • Source package: [ucode-intel]

    Details (1)
    • 20260812-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 20241112-1.1

      usn · ucode-intel · opensuse · tumbleweed

Observed:

References