Vulnerability · Published May 16, 2024 · Assigned by intel

CVE-2024-21823

High 7.5

In plain English

A high-severity uncontrolled resource consumption in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.2%top 90.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors may allow an authorized user to potentially enable escalation of privilege local access

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9bpftool7.3.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k-debug5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k-debug-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k-debug-devel5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k-debug-modules5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k-devel5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k-devel-matched5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k-modules5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k-modules-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-64k-modules-extra5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-abi-stablelists4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-abi-stablelists5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-core4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-cross-headers4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-cross-headers5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-debug4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-debug5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-debug-core4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-debug-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-debug-devel4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-debug-devel5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-debug-devel-matched5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-debug-modules4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-debug-modules5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-debug-modules-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-debug-modules-extra5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-debug-uki-virt5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-devel4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-devel5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-devel-matched5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-doc4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-doc5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-headers4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-headers5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-modules4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-modules5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-modules-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-modules-extra4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-modules-extra5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-rt4.18.0-553.16.1.rt7.357.el8_10ALSA-2024:5102
AlmaLinux:9kernel-rt5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-rt-core4.18.0-553.16.1.rt7.357.el8_10ALSA-2024:5102
AlmaLinux:9kernel-rt-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-rt-debug4.18.0-553.16.1.rt7.357.el8_10ALSA-2024:5102
AlmaLinux:9kernel-rt-debug5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-rt-debug-core4.18.0-553.16.1.rt7.357.el8_10ALSA-2024:5102
AlmaLinux:9kernel-rt-debug-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.16.1.rt7.357.el8_10ALSA-2024:5102
AlmaLinux:9kernel-rt-debug-devel5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-rt-debug-kvm4.18.0-553.16.1.rt7.357.el8_10ALSA-2024:5102
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.16.1.rt7.357.el8_10ALSA-2024:5102
AlmaLinux:9kernel-rt-debug-modules5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.16.1.rt7.357.el8_10ALSA-2024:5102
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-rt-devel4.18.0-553.16.1.rt7.357.el8_10ALSA-2024:5102
AlmaLinux:9kernel-rt-devel5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-rt-kvm4.18.0-553.16.1.rt7.357.el8_10ALSA-2024:5102
AlmaLinux:8kernel-rt-modules4.18.0-553.16.1.rt7.357.el8_10ALSA-2024:5102
AlmaLinux:9kernel-rt-modules5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-rt-modules-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.16.1.rt7.357.el8_10ALSA-2024:5102
AlmaLinux:9kernel-rt-modules-extra5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-tools4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-tools5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-tools-libs4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-tools-libs5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-tools-libs-devel5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-uki-virt5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-zfcpdump4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-zfcpdump5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-zfcpdump-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-zfcpdump-devel5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-zfcpdump-modules5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9libperf5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8perf4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9perf5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:8python3-perf4.18.0-553.16.1.el8_10ALSA-2024:5101
AlmaLinux:9python3-perf5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9rtla5.14.0-427.31.1.el9_4ALSA-2024:5363
AlmaLinux:9rv5.14.0-427.31.1.el9_4ALSA-2024:5363
Debian:12linux6.1.94-1DEBIAN-CVE-2024-21823
Debian:13linux6.8.11-1DEBIAN-CVE-2024-21823
Debian:14linux6.8.11-1DEBIAN-CVE-2024-21823
Rocky Linux:8kernel0:4.18.0-553.16.1.el8_10RLSA-2024:5101
Rocky Linux:8kernel0:4.18.0-553.16.1.el8_10.cloud.0.1RXSA-2024:5101
Rocky Linux:9kernel0:5.14.0-427.31.1.el9_4RLSA-2024:5363
Rocky Linux:8kernel-rt0:4.18.0-553.16.1.rt7.357.el8_10RLSA-2024:5102
Ubuntu:22.04:LTSlinux5.15.0-112.122USN-6820-1
Ubuntu:22.04:LTSlinux5.15.0-112.122UBUNTU-CVE-2024-21823
Ubuntu:24.04:LTSlinux6.8.0-35.35USN-6816-1
Ubuntu:24.04:LTSlinux6.8.0-35.35UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-aws5.15.0-1064.70USN-6870-1
Ubuntu:22.04:LTSlinux-aws5.15.0-1064.70UBUNTU-CVE-2024-21823
Ubuntu:24.04:LTSlinux-aws6.8.0-1010.10USN-6864-2
Ubuntu:24.04:LTSlinux-aws6.8.0-1010.10UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-aws-6.56.5.0-1022.22~22.04.1USN-6873-1
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1010.10~22.04.2UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-azure5.15.0-1067.76USN-6870-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1067.76UBUNTU-CVE-2024-21823
Ubuntu:24.04:LTSlinux-azure6.8.0-1009.9UBUNTU-CVE-2024-21823
Ubuntu:24.04:LTSlinux-azure6.8.0-1009.9USN-6875-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1023.24~22.04.1USN-6874-1
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1009.9~22.04.1UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1067.76.1USN-6870-1
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1067.76.1UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-gcp5.15.0-1062.70USN-6820-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1062.70UBUNTU-CVE-2024-21823
Ubuntu:24.04:LTSlinux-gcp6.8.0-1009.10UBUNTU-CVE-2024-21823
Ubuntu:24.04:LTSlinux-gcp6.8.0-1009.10USN-6864-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-gke5.15.0-1061.67UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-gke5.15.0-1061.67USN-6870-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1005.8USN-6864-3
Ubuntu:24.04:LTSlinux-gke6.8.0-1005.8UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1047.54USN-6870-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1047.54UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-41.41~22.04.2UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-ibm5.15.0-1057.60UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-ibm5.15.0-1057.60USN-6870-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1006.6USN-6816-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1006.6UBUNTU-CVE-2024-21823
Ubuntu:24.04:LTSlinux-intel6.8.0-1006.13USN-6864-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1059.65USN-6870-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1059.65UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-kvm5.15.0-1061.66USN-6870-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1061.66UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-110.120UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-110.120USN-6820-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-35.35.1UBUNTU-CVE-2024-21823
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-35.35.1USN-6816-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-41.41.1~22.04.1UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1058.59USN-6820-2
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1058.59UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1021.22UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1026.26UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1015.15UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1025.26USN-6873-1
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1007.7USN-6864-2
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1007.7UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-oracle5.15.0-1062.68USN-6870-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1062.68UBUNTU-CVE-2024-21823
Ubuntu:24.04:LTSlinux-oracle6.8.0-1006.6USN-6878-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1006.6UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1025.25~22.04.1USN-6873-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1058.61USN-6919-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1058.61UBUNTU-CVE-2024-21823
Ubuntu:24.04:LTSlinux-raspi6.8.0-1005.5UBUNTU-CVE-2024-21823
Ubuntu:24.04:LTSlinux-raspi6.8.0-1005.5USN-6816-1
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-21823
Ubuntu:24.04:LTSlinux-riscv6.8.0-35.35.1UBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-21823
Ubuntu:22.04:LTSlinux-starfive-6.56.5.0-1016.17~22.04.1USN-6873-2
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1030.34USN-6820-1
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1030.34UBUNTU-CVE-2024-21823

Affected products (as reported)

Weakness: CWE-1264, CWE-400 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H

References