QID 750145

This update for ucode-intel fixes the following issues: - updated to intel cpu microcode 20210525 release.
- cve-2020-24513: a domain bypass transient execution vulnerability was discovered on some intel atom processors that use a micro-architectural incident channel. (
Intel-sa-00465 bsc#1179833) see also: 0465.html - cve-2020-24511: the ibrs feature to mitigate spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (intel-sa-00464 bsc#1179836) see also 0464.html) - cve-2020-24512: fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 intel-sa-00464) see also 0464.html) - cve-2020-24489: fixed intel vt-d device pass through potential local privilege escalation (intel-sa-00442 bsc#1179839) see also 0442.html other fixes: - update for functional issues.
Refer to [third generation intel xeon processor scalable family specification update]()for details.
Refer to [second generation intel xeon processor scalable family specification update]() for details.
Refer to [intel xeon processor scalable family specification update]() for details.
Refer to [intel xeon processor d-1500, d-1500 ns and d-1600 ns spec update]( on/xeon-d-1500-specification-update.html) for details.
Refer to [intel xeon e7-8800 and e7-4800 v3 processor specification update]( spec-update.html) for details.
Refer to [intel xeon processor e5 v3 product family specification update]( spec-update.html?wapkw=processor+spec+update+e5) for details.
Refer to [10th gen intel core processor families specification update]( re/10th-gen-core-families-specification-update.html) for details.
Refer to [8th and 9th gen intel core processor family spec update]( re/8th-gen-core-spec-update.html) for details.
Refer to [7th gen and 8th gen (u quad-core) intel processor families specification update]( e-family-spec-update.html) for details.
Refer to [6th gen intel processor family specification update]() for details.
Refer to [intel xeon e3-1200 v6 processor family specification update]( 0v6-spec-update.html) for details.
Refer to [intel xeon e-2100 and e-2200 processor family specification update]( on/xeon-e-2100-specification-update.html) for details.

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Successful exploitation allows attacker to compromise the system.