RHSA-2021:3364 - Security Advisory

Topic

An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.2 Extended User Support.

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

Description

The microcode_ctl packages provide microcode updates for Intel.

Security Fix(es):

• hw: Vector Register Data Sampling (CVE-2020-0548)
• hw: L1D Cache Eviction Sampling (CVE-2020-0549)
• hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)
• hw: Information disclosure issue in Intel SGX via RAPL interface

(CVE-2020-8695)

• hw: Vector Register Leakage-Active (CVE-2020-8696)
• hw: Fast forward store predictor (CVE-2020-8698)
• hw: vt-d related privilege escalation (CVE-2020-24489)
• hw: improper isolation of shared resources in some Intel Processors

(CVE-2020-24511)

• hw: observable timing discrepancy in some Intel Processors

(CVE-2020-24512)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2 x86_64
• Red Hat Enterprise Linux Server - AUS 8.2 x86_64
• Red Hat Enterprise Linux Server - TUS 8.2 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.2 x86_64

Fixes

• BZ - 1788786 - CVE-2020-0548 hw: Vector Register Data Sampling
• BZ - 1788788 - CVE-2020-0549 hw: L1D Cache Eviction Sampling
• BZ - 1827165 - CVE-2020-0543 hw: Special Register Buffer Data Sampling (SRBDS)
• BZ - 1828583 - CVE-2020-8695 hw: Information disclosure issue in Intel SGX via RAPL interface
• BZ - 1890355 - CVE-2020-8696 hw: Vector Register Leakage-Active
• BZ - 1890356 - CVE-2020-8698 hw: Fast forward store predictor
• BZ - 1962650 - CVE-2020-24489 hw: vt-d related privilege escalation
• BZ - 1962702 - CVE-2020-24511 hw: improper isolation of shared resources in some Intel Processors
• BZ - 1962722 - CVE-2020-24512 hw: observable timing discrepancy in some Intel Processors
• BZ - 1972326 - [rhel-8.2.0.z] Re-enable 06-5e-03 (SKL-H/S, CPUID 0x506e3) latest microcode updates
• BZ - 1972329 - [rhel-8.2.0.z] Re-enable 06-8c-01 (TGL-UP3/UP4, CPUID 0x806c1) latest microcode updates

CVEs

• CVE-2020-0543
• CVE-2020-0548
• CVE-2020-0549
• CVE-2020-8695
• CVE-2020-8696
• CVE-2020-8698
• CVE-2020-24489
• CVE-2020-24511
• CVE-2020-24512

References

• https://access.redhat.com/security/updates/classification/#important