Intel OoB CPU advisory 2023-11-14

Topic

New Reply

CVSS Base Score of: 8.8 High

Addresses a privilege escalation flaw with microcodes for Alder Lake, Raptor Lake and Sapphire Rapids CPU’s for a redundant prefix with a potential of Denial-of-Service.

CVE-2023-23583 intel info:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html

A potential security vulnerability in some Intel® Processors may allow escalation of privilege and/or information disclosure and/or denial of service via local access. Intel is releasing firmware updates to mitigate this potential vulnerability…

Win8.1/R2 Hybrid lives on..

2 users thanked author for this post.

Ascaris, Alex5723

Reply | Quote

Replies

Just got the new microcodes (as a Linux update) today for my two newest PCs, the Acer Swift Go 14 and Dell XPS 13 as listed in my .sig.

The XPS 13 is a Tiger Lake, and there are a few different Tiger Lake models listed, as well as some Ice Lake units.

The Acer Swift Go 14 is a Raptor Lake model.

I am waiting to see which one of these gets a firmware update first. Both of them got an update on 9/11, and the Acer got another one on 9/13 (must have been a bug discovered with the 9/11 one). It is already taken care of with the Linux update, but it’s kind of a horse race to see who first provides the updated firmware.

Dell XPS 13/9310, i5-1135G7/16GB, KDE Neon
XPG Xenia 15, i7-9750H/32GB & GTX1660ti, KDE Neon
Acer Swift Go 14, i5-1335U/16GB, KDE Neon (and Win 11)

Reply | Quote

Ascaris wrote:

but it’s kind of a horse race to see who first provides the updated firmware.

And as I would have guessed, it’s Dell for the win.

 

Dell XPS 13/9310, i5-1135G7/16GB, KDE Neon
XPG Xenia 15, i7-9750H/32GB & GTX1660ti, KDE Neon
Acer Swift Go 14, i5-1335U/16GB, KDE Neon (and Win 11)

Reply | Quote