QID 239569

The microcode_ctl packages provide microcode updates for Intel.

Security Fixes: hw: Vector Register Data Sampling (CVE-2020-0548) hw: L1D Cache Eviction Sampling (CVE-2020-0549) hw: Special Register Buffer Data Sampling (SRBDS)
(CVE-2020-0543) hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695) hw: Vector Register Leakage-Active (CVE-2020-8696) hw: Fast forward store predictor (CVE-2020-8698) hw: vt-d related privilege escalation (CVE-2020-24489) hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511) hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512) Bug Fix(es): [rhel-8.1.0.z] Re-enable 06-5e-03 (SKL-H/S, CPUID 0x506e3)
latest microcode updates (BZ#1972327) [rhel-8.1.0.z] Re-enable 06-8c-01 (TGL-UP3/UP4, CPUID 0x806c1)
latest microcode updates (BZ#1972331) Solution Before applying this update, make sure all previously released erratarelevant to your system have been applied.For details on how to apply this update, refer to:https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.1 x86_64 Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.1 x86_64 Fixes BZ - 1788786 - CVE-2020-0548 hw: Vector Register Data Sampling BZ - 1788788 - CVE-2020-0549 hw: L1D Cache Eviction Sampling BZ - 1827165 - CVE-2020-0543 hw: Special Register Buffer Data Sampling (SRBDS) BZ - 1828583 - CVE-2020-8695 hw: Information disclosure issue in Intel SGX via RAPL interface BZ - 1890355 - CVE-2020-8696 hw: Vector Register Leakage-Active BZ - 1890356 - CVE-2020-8698 hw: Fast forward store predictor BZ - 1962650 - CVE-2020-24489 hw: vt-d related privilege escalation BZ - 1962702 - CVE-2020-24511 hw: improper isolation of shared resources in some Intel Processors BZ - 1962722 - CVE-2020-24512 hw: observable timing discrepancy in some Intel Processors BZ - 1972327 - [rhel-8.1.0.z] Re-enable 06-5e-03 (SKL-H/S, CPUID 0x506e3)
latest microcode updates BZ - 1972331 - [rhel-8.1.0.z] Re-enable 06-8c-01 (TGL-UP3/UP4, CPUID 0x806c1)
latest microcode updates CVEs CVE-2020-0543 CVE-2020-0548 CVE-2020-0549 CVE-2020-8695 CVE-2020-8696 CVE-2020-8698 CVE-2020-24489 CVE-2020

Affected Products:

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.1 x86_64
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.1 x86_64

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

On successful exploitation, it could allow an attacker to execute code.