Quentin Casasnovas

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.0 **Description** The issue is a stack-based buffer overflow in the `get matching model microcode` function, located in `arch/x86/kernel/cpu/microcode/intel early.c`. This allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to the initrd. **Recommendations** For Linux kernel versions prior to 4.0, update to version 4.0 or later to resolve the issue. As a temporary workaround, consider restricting root privileges to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 3.19.2 **Description** The issue is related to the xsave/xrstor implementation in the Linux kernel, which does not provide protection against instruction faulting. This allows local users to cause a denial of service by triggering a fault, for example, through an unaligned memory operand or a non-canonical address memory operand. **Recommendations** For Linux kernel versions prior to 3.19.2, update to version 3.19.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.3.3 **Description** The issue allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging improper access to a certain error field in the ext4 journal stop function. **Recommendations** For versions prior to 4.3.3, update to version 4.3.3 or later to resolve the issue.