Improper Access Control in Intel Microcode Packages - CVE-2024-36293
Summary
CVE-2024-36293: Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access. Affects intel-ucode versions < 20250211-r0. Fixed in 20250211-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Intel microcode is a critical component that provides updates to the processor's internal instructions, enhancing performance and security. It is essential for maintaining the stability and security of Intel processors. The vulnerability CVE-2024-36293 affects multiple versions of the intel-microcode package across Debian distributions, potentially exposing systems to denial of service attacks due to improper access control.
Vulnerability Detail
CVE-2024-36293 arises from improper access control in the EDECCSSA user leaf function for certain Intel processors utilizing Intel SGX technology. This vulnerability allows an authenticated user to potentially exploit the flaw, leading to a denial of service condition. The issue is rooted in the way access permissions are managed, which could allow unauthorized actions by legitimate users, thereby compromising system integrity.
How To Fix
Minimum fixed version
20250211-r0
This is the first release that contains the fix.
sudo apk add --upgrade intel-ucodeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the affected functionality by modifying user permissions or disabling the EDECCSSA user leaf function if it is not required for their operations. However, this is not a permanent solution and should be followed by applying the necessary updates as soon as possible.
Conclusion
CVE-2024-36293 represents a significant security risk for systems utilizing Intel microcode across various Debian distributions. It is crucial for users to update their packages promptly to mitigate the risk of denial of service attacks. Implementing workarounds can provide temporary relief, but applying the necessary patches is the best course of action.
See every vulnerability recorded for intel-ucode →
FAQ
CVE-2024-36293 is a vulnerability in the intel-microcode package that allows an authenticated user to potentially cause a denial of service due to improper access control.
The vulnerability affects Intel processors with Intel SGX across Debian 11, 12, and 13 distributions that utilize the intel-microcode package.
You can use Vulert to monitor and alert for open-source vulnerabilities. Visit Vulert Scanner to check if your application is affected by CVE-2024-36293 without requiring any signup.
If immediate updates are not possible, consider implementing a workaround by restricting access to the affected functionality until a patch can be applied.
Detailed information about CVE-2024-36293 can be found on the official CVE database and security advisories related to Intel microcode.
Related vulnerabilities
Recent vulnerabilities recorded for intel-ucode.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
