PT-2024-8887 · Intel+6 · Intel Xeon Processors+6

Published 2024-02-28 · Updated 2025-03-26 · CVE-2024-24980

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions: Intel Xeon Processors versions 3rd Generation through 5th Generation

Description: The issue is related to a protection mechanism failure in Intel Xeon Processors, which may allow a privileged user to potentially enable escalation of privilege via local access. This could lead to a violation of data protection mechanisms.

Recommendations: For Intel Xeon Processors versions 3rd Generation through 5th Generation, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

ALT-PU-2024-11724

ALT-PU-2024-12531

BDU:2024-10554

CVE-2024-24980

MGASA-2024-0296

OESA-2024-2140

OPENSUSE-SU-2024:14268-1

OPENSUSE-SU-2024_3095-1

SUSE-SU-2024:2941-1

SUSE-SU-2024:3095-1

SUSE-SU-2025:1032-1

USN-6967-1

Affected Products

Alt Linux

Astra Linux

Intel Xeon Processors

Linuxmint

Red Os

Suse

Ubuntu

References · 84

• https://osv.dev/vulnerability/SUSE-SU-2025:1032-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-24980 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10554 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14268-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2024-0296 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-42667 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-24980 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-49141 · Security Note
• https://osv.dev/vulnerability/OESA-2024-2140 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-24980 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-24853 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-24980 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-24980 · Vendor Advisory