CVE-2024-21823: Intel DSA and Intel IAA advisory
Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors may allow an authorized user to potentially enable denial of service via local access.
Other sources
Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors may allow an authorized user to potentially enable escalation of privilege local access
— NVD
Intel DSA and IAA are vulnerable to a denial of service, caused by a hardware logic with insecure de-synchronization. A local authenticated attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
On Sapphire Rapids and related platforms, the DSA and IAA devices have an erratum (INTEL-SA-01084) that causes direct access (for example, by using the ENQCMD or MOVDIR64 instructions) from untrusted applications to be a security problem.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21823?
CVE-2024-21823 is considered to have a moderate severity level due to potential denial of service through local access.
How do I fix CVE-2024-21823?
To fix CVE-2024-21823, update the affected 'linux' package to version 6.1.123-1 or later.
Which Intel processors are affected by CVE-2024-21823?
CVE-2024-21823 affects some Intel 4th and 5th generation Xeon processors.
Can CVE-2024-21823 be exploited remotely?
CVE-2024-21823 cannot be exploited remotely as it requires local access for potential denial of service.
Is my system vulnerable to CVE-2024-21823?
You may be vulnerable to CVE-2024-21823 if you are using the specified versions of the 'linux' package on the affected Intel processors.