CVE-2023-46103

NameCVE-2023-46103
DescriptionSequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
intel-microcode (PTS)buster/non-free3.20220510.1~deb10u1vulnerable
buster/non-free (security)3.20240312.1~deb10u1vulnerable
bullseye/non-free, bullseye/non-free (security)3.20231114.1~deb11u1vulnerable
bookworm/non-free-firmware (security), bookworm/non-free-firmware3.20231114.1~deb12u1vulnerable
sid/non-free-firmware, trixie/non-free-firmware3.20240531.1+nmu1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
intel-microcodesource(unstable)3.20240514.1

Notes

[bookworm] - intel-microcode <no-dsa> (Minor issue; can be fixed in point release)
[bullseye] - intel-microcode <no-dsa> (Minor issue; can be fixed in point release)
[buster] - intel-microcode <postponed> (Minor issue; can be fixed in next update)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514

Search for package or bug name: Reporting problems