PT-2024-19095 · Intel+6 · Intel Xeon Processors+6

Published 2024-11-13 · Updated 2025-11-26 · CVE-2024-21853

Positive Technologies (AI Summary)

CVSS v4.0

5.7

Medium

Base vector

AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Intel Xeon Processors versions 4th and 5th Generation

Description The issue is related to improper finite state machines (FSMs) in the hardware logic of some Intel Xeon Processors. This could potentially allow an authorized user to enable denial of service via local access.

Recommendations For Intel Xeon Processors versions 4th and 5th Generation, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-1245

Related Identifiers

ALT-PU-2025-14707

BDU:2025-03309

CVE-2024-21853

DLA-4002-1

MGASA-2024-0377

OESA-2024-2524

OPENSUSE-SU-2024:14496-1

OPENSUSE-SU-2024_4053-1

SUSE-SU-2024:3995-1

SUSE-SU-2024:4053-1

SUSE-SU-2025:1032-1

SUSE-SU-2025:20092-1

SUSE-SU-2025:20286-1

USN-7149-1

Affected Products

Alt Linux

Astra Linux

Intel Xeon Processors

Linuxmint

Red Os

Suse

Ubuntu

References · 85

• https://ubuntu.com/security/CVE-2024-23918 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1032-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-21853 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:4053-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-24968 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2024-21853 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-21853 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14496-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20286-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2024-0377 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-2524 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-21820 · Security Note
• https://ubuntu.com/security/CVE-2024-21853 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3995-1 · Vendor Advisory