RLSA-2021:3027

Dashboard / Vulnerabilities / RLSA-2021:3027

RLSA-2021:3027

Summary: Important: microcode_ctl security, bug fix and enhancement update

Details: The microcode_ctl packages provide microcode updates for Intel. Security Fix(es): * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543) * hw: Vector Register Data Sampling (CVE-2020-0548) * hw: L1D Cache Eviction Sampling (CVE-2020-0549) * hw: vt-d related privilege escalation (CVE-2020-24489) * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511) * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512) * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695) * hw: Vector Register Leakage-Active (CVE-2020-8696) * hw: Fast forward store predictor (CVE-2020-8698)

References: https://errata.rockylinux.org/RLSA-2021:3027, https://bugzilla.redhat.com/show_bug.cgi?id=1788786, https://bugzilla.redhat.com/show_bug.cgi?id=1788788, https://bugzilla.redhat.com/show_bug.cgi?id=1827165, https://bugzilla.redhat.com/show_bug.cgi?id=1828583, https://bugzilla.redhat.com/show_bug.cgi?id=1890355, https://bugzilla.redhat.com/show_bug.cgi?id=1890356, https://bugzilla.redhat.com/show_bug.cgi?id=1962650, https://bugzilla.redhat.com/show_bug.cgi?id=1962702, https://bugzilla.redhat.com/show_bug.cgi?id=1962722, https://bugzilla.redhat.com/show_bug.cgi?id=1972325, https://bugzilla.redhat.com/show_bug.cgi?id=1972328