Vulnerability-Lookup

BDU:2024-02524 (CVE-2023-38575)

Vulnerability from fstec – Published: 2024-04-03 – Updated: 2025-11-19 – View on bdu.fstec.ru Fixed

Title

Уязвимость микропрограммного обеспечения процессоров Intel, связанная с раскрытием информации через несоответствие, позволяющая нарушителю раскрыть защищаемую информацию

Summary

Уязвимость микропрограммного обеспечения процессоров Intel связана с раскрытием информации через несоответствие. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию

Severity

4.6 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:N/A:N

5.5 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Information gathering

Incidents

Being clarified

Remediation

Software update

CWE

CWE-1303 - Нетранспарентный совместное использование микроархитектурных ресурсов

Aliases

CVE-2023-38575, INTEL-SA-00982, LEN-155477

References

8 references

URL
https://support.lenovo.com/us/en/product_security/LEN-155477
https://www.intel.com/content/www/us/en/developer/topic-technology/software-sec…
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html
https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.11/
http://repo.red-soft.ru/redos/7.3c/x86_64/updates/
https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17
https://abf.rosa.ru/advisories/ROSA-SA-2025-2811
https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru

Impacted products

101 products from 7 vendors

Vendors

Intel Corp., ООО «Ред Софт», ООО «РусБИТех-Астра», Lenovo Group Limited, АО «НППКТ», АО «НТЦ ИТ РОСА», ООО «НЦПР»

Products

Intel Celeron, Intel Xeon E Series, Intel Pentium Gold Series, Intel Xeon W Processor, РЕД ОС (запись в едином реестре российских программ №3751), Astra Linux Special Edition (запись в едином реестре российских программ №369), 12th Generation Intel Core Processor Family, 13th Generation Intel Core Processor Family, 4th Generation Intel Xeon Scalable processors, 4th Generation Intel Xeon Platinum processors, 4th Generation Intel Xeon Gold Processors, 4th Generation Intel Xeon Silver Processor, 4th Generation Intel Xeon Bronze Processor, 4th Gen Intel Xeon Scalable Processors with Intel vRAN, IdeaCentre 3-07IMB05, IdeaCentre 5 14IAB7, IdeaCentre 5 14IRB8, IdeaCentre Gaming 5 17IAB7, Legion T5 26IRB8, Legion T7 34IRZ8, LOQ 17IRB8, ThinkCentre M70c, ThinkCentre M70q Gen 2, ThinkCentre M90a, ThinkCentre M90a Gen 2, ThinkCentre M90a Gen 3, ThinkCentre M90a Gen 3 Pro, ThinkCentre M90q Gen 2, ThinkCentre Neo 50t Gen 3, ThinkCentre Neo 50t Gen 4, Lenovo V50a-22IMB, Lenovo V50a-24IMB, Lenovo V50s-07IMB, Lenovo V50t-13IMH, 300w Yoga Gen 4 Laptop (Lenovo), 500w Yoga Gen 4 Laptop (Lenovo), ThinkPad L13 Gen 3 Type (21B3), ThinkPad L13 Gen 3 Type (21B4), ThinkPad L13 Gen 3 Type (21B5), ThinkPad L13 Gen 3 Type (21B6), ThinkPad L14 Gen 3 Type (21C1), ThinkPad L14 Gen 3 Type (21C2), ThinkPad L15 Gen 3 Type (21C3), ThinkPad L15 Gen 3 Type (21C4), ThinkPad X1 Carbon 10th Gen Type (21CB), ThinkPad X1 Carbon 10th Gen Type (21CC), ThinkPad X1 Yoga 7th Gen Type (21CD), ThinkPad X1 Yoga 7th Gen Type (21CE), ThinkPad X13 Yoga Gen 3 Type (21AW), ThinkPad X13 Yoga Gen 3 Type (21AX), ThinkStation P350 Tiny Workstation, ThinkSystem ST50 V2, ThinkSystem ST58 V2, 14th Generation Intel Core Processor Family, P7 Intel Workstation (ThinkStation), Legion 7 16IAX7, Lenovo Slim 7 ProX 14IAH7, Lenovo Slim 9 14IAP7, Yoga Slim 7 ProX 14IAH7, ThinkCentre Neo 50a 24 Gen 3 Desktop, ThinkCentre Neo 50a 24 Gen 4 Desktop, 100w Gen 4 Laptop (Lenovo), IdeaPad 5 14IAL7, IdeaPad 5 Pro 16IAH7, IdeaPad Duet 5 12IAU7, IdeaPad Duet 5 12IRU8, IdeaPad Flex 5 14IAU7 Laptop, IdeaPad Flex 5 16IAU7, IdeaPad Gaming 3 15IAH7 Laptop, IdeaPad Gaming 3 16IAH7, IdeaPad Pro 5 14IRH8, Legion 9 16IRX8, Lenovo Flex 7 14IAU7, Lenovo Slim 7 14IRP8, Slim 7 16IAH7 Laptop, ThinkBook 13s G4 IAP, ThinkBook 13x G2 IAP Laptop, ThinkBook 14 G4+ IAP Laptop, ThinkBook 16 G4+ IAP Laptop, Yoga 7 14IRL8, Yoga 7 16IRL8, Yoga Book 9 13IRU8, Yoga Pro 7 14IRH8, Yoga Slim 6 14IAP8, Yoga Slim 6 14IRP8, Yoga Slim 7 Pro 16IAH7 Laptop, Yoga Slim 9 14IAP7, ThinkPad P1 Gen 5 Type (21DC), ThinkPad P1 Gen 5 Type (21DD), ThinkPad X1 Extreme Gen 5 Type (21DE), ThinkPad X1 Extreme Gen 5 Type (21DF), ThinkPad X1 Nano Gen 2 Type (21E8), ThinkPad X1 Nano Gen 2 Type (21E9), 5th Generation Intel Xeon Scalable processors, Intel Pentium Processor G7400, Intel Pentium Processor G7400T, IdeaCentre AIO 5 24IAH7, IdeaCentre AIO 5 27IAH7, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), ROSA Virtualization 3.0 (запись в едином реестре российских программ №21308), МСВСфера

Versions

- (Intel Celeron), - (Intel Xeon E Series), - (Intel Pentium Gold Series), - (Intel Xeon W Processor), 7.3 (РЕД ОС), 1.7 (Astra Linux Special Edition), - (12th Generation Intel Core Processor Family), - (13th Generation Intel Core Processor Family), - (4th Generation Intel Xeon Scalable processors), - (4th Generation Intel Xeon Platinum processors), - (4th Generation Intel Xeon Gold Processors), - (4th Generation Intel Xeon Silver Processor), - (4th Generation Intel Xeon Bronze Processor), - (4th Gen Intel Xeon Scalable Processors with Intel vRAN), до M2VKT23A (IdeaCentre 3-07IMB05), до M42KT4AA (IdeaCentre 5 14IAB7), до M4UKT3DA (IdeaCentre 5 14IRB8), до M42KT4AA (IdeaCentre Gaming 5 17IAB7), до O5TKT34A (Legion T5 26IRB8), до O5UKT37A (Legion T7 34IRZ8), до M4UKT3DA (LOQ 17IRB8), до M2VKT23A (ThinkCentre M70c), до M3JKT3DA (ThinkCentre M70q Gen 2), до M2RKT58A (ThinkCentre M90a), до M3LKT2BA (ThinkCentre M90a Gen 2), до M4IKT21A (ThinkCentre M90a Gen 3), до M4HKT22A (ThinkCentre M90a Gen 3 Pro), до M3JKT3DA (ThinkCentre M90q Gen 2), до M42KT4AA (ThinkCentre Neo 50t Gen 3), до M4UKT3DA (ThinkCentre Neo 50t Gen 4), до M36KT33A (Lenovo V50a-22IMB), до M36KT33A (Lenovo V50a-24IMB), до M2VKT23A (Lenovo V50s-07IMB), до M4PKT17A (Lenovo V50t-13IMH), до L2CN32WW (300w Yoga Gen 4 Laptop (Lenovo)), до L2CN32WW (500w Yoga Gen 4 Laptop (Lenovo)), до 1.21 (ThinkPad L13 Gen 3 Type (21B3)), до 1.21 (ThinkPad L13 Gen 3 Type (21B4)), до 1.21 (ThinkPad L13 Gen 3 Type (21B5)), до 1.21 (ThinkPad L13 Gen 3 Type (21B6)), до 1.34 (ThinkPad L14 Gen 3 Type (21C1)), до 1.34 (ThinkPad L14 Gen 3 Type (21C2)), до 1.34 (ThinkPad L15 Gen 3 Type (21C3)), до 1.34 (ThinkPad L15 Gen 3 Type (21C4)), до 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CB)), до 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CC)), до 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CD)), до 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CE)), до 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AW)), до 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AX)), до M3JKT3DA (ThinkStation P350 Tiny Workstation), до TOE112B (ThinkSystem ST50 V2), до TOE112B (ThinkSystem ST58 V2), - (14th Generation Intel Core Processor Family), до S0DKT16A (P7 Intel Workstation (ThinkStation)), до K1CN45WW (Legion 7 16IAX7), до HMCN48WW (Lenovo Slim 7 ProX 14IAH7), до J3CN55WW (Lenovo Slim 9 14IAP7), до HMCN48WW (Yoga Slim 7 ProX 14IAH7), до O5RKT22A (ThinkCentre Neo 50a 24 Gen 3 Desktop), до O5XKT21A (ThinkCentre Neo 50a 24 Gen 4 Desktop), до L2CN32WW (100w Gen 4 Laptop (Lenovo)), до JLCN37WW (IdeaPad 5 14IAL7), до J5CN34WW (IdeaPad 5 Pro 16IAH7), до JXCN48WW (IdeaPad Duet 5 12IAU7), до M7CN20WW (IdeaPad Duet 5 12IRU8), до J7CN46WW (IdeaPad Flex 5 14IAU7 Laptop), до J7CN46WW (IdeaPad Flex 5 16IAU7), до JMCN45WW (IdeaPad Gaming 3 15IAH7 Laptop), до JMCN45WW (IdeaPad Gaming 3 16IAH7), до LJCN29WW (IdeaPad Pro 5 14IRH8), до MHCH40WW (Legion 9 16IRX8), до J7CN46WW (Lenovo Flex 7 14IAU7), до LGCN28WW (Lenovo Slim 7 14IRP8), до KMCN20WW (Slim 7 16IAH7 Laptop), до HWCN51WW (ThinkBook 13s G4 IAP), до HXCN56WW (ThinkBook 13x G2 IAP Laptop), до HYCN48WW (ThinkBook 14 G4+ IAP Laptop), до HYCN48WW (ThinkBook 16 G4+ IAP Laptop), до LHCN22WW (Yoga 7 14IRL8), до LHCN22WW (Yoga 7 16IRL8), до KXCN36WW (Yoga Book 9 13IRU8), до LWCN26WW (Yoga Pro 7 14IRH8), до KTCN41WW (Yoga Slim 6 14IAP8), до LGCN28WW (Yoga Slim 6 14IRP8), до KMCN20WW (Yoga Slim 7 Pro 16IAH7 Laptop), до J3CN55WW (Yoga Slim 9 14IAP7), до 1.22 (ThinkPad P1 Gen 5 Type (21DC)), до 1.22 (ThinkPad P1 Gen 5 Type (21DD)), до 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DE)), до 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DF)), до 1.25 (ThinkPad X1 Nano Gen 2 Type (21E8)), до 1.25 (ThinkPad X1 Nano Gen 2 Type (21E9)), - (5th Generation Intel Xeon Scalable processors), - (Intel Pentium Processor G7400), - (Intel Pentium Processor G7400T), до O5RKT22A (IdeaCentre AIO 5 24IAH7), до O5RKT22A (IdeaCentre AIO 5 27IAH7), до 2.11 (ОСОН ОСнова Оnyx), 3.0 (ROSA Virtualization 3.0), 9.5 (МСВСфера)

Product types

Appliance software, Firmware, Operating system, Virtualization software

Platforms

ООО «Ред Софт» РЕД ОС 7.3 (запись в едином реестре российских программ №3751), ООО «РусБИТех-Астра» Astra Linux Special Edition 1.7 (запись в едином реестре российских программ №369), АО «НППКТ» ОСОН ОСнова Оnyx до 2.11 (запись в едином реестре российских программ №5913), АО «НТЦ ИТ РОСА» ROSA Virtualization 3.0 3.0 (запись в едином реестре российских программ №21308), ООО «НЦПР» МСВСфера 9.5

Mitigations

Использование рекомендаций: Для продуктов Lenovo: https://support.lenovo.com/us/en/product_security/LEN-155477 Для продуктов Intel: https://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html Для ОСОН ОСнова Оnyx (2.11): Обновление программного обеспечения intel-microcode до версии 3.20240312.1~deb10u1 Для РедОС: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ Для ОС Astra Linux: обновить пакет intel-microcode до 3.20240813.1~deb12u1+ci202409161120+astra3 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 Для программной системы управления средой виртуализации с подсистемой безагентного резервного копирования виртуальных машин «ROSA Virtualization 3.0»: https://abf.rosa.ru/advisories/ROSA-SA-2025-2811 Для МСВСфера: https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:N/A:N",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Intel Corp., \u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Lenovo Group Limited, \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb, \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb, \u041e\u041e\u041e \u00ab\u041d\u0426\u041f\u0420\u00bb",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Intel Celeron), - (Intel Xeon E Series), - (Intel Pentium Gold Series), - (Intel Xeon W Processor), 7.3 (\u0420\u0415\u0414 \u041e\u0421), 1.7 (Astra Linux Special Edition), - (12th Generation Intel Core Processor Family), - (13th Generation Intel Core Processor Family), - (4th Generation Intel Xeon Scalable processors), - (4th Generation Intel Xeon Platinum processors), - (4th Generation Intel Xeon Gold Processors), - (4th Generation Intel Xeon Silver Processor), - (4th Generation Intel Xeon Bronze Processor), - (4th Gen Intel Xeon Scalable Processors with Intel vRAN), \u0434\u043e M2VKT23A (IdeaCentre 3-07IMB05), \u0434\u043e M42KT4AA (IdeaCentre 5 14IAB7), \u0434\u043e M4UKT3DA (IdeaCentre 5 14IRB8), \u0434\u043e M42KT4AA (IdeaCentre Gaming 5 17IAB7), \u0434\u043e O5TKT34A (Legion T5 26IRB8), \u0434\u043e O5UKT37A (Legion T7 34IRZ8), \u0434\u043e M4UKT3DA (LOQ 17IRB8), \u0434\u043e M2VKT23A (ThinkCentre M70c), \u0434\u043e M3JKT3DA (ThinkCentre M70q Gen 2), \u0434\u043e M2RKT58A (ThinkCentre M90a), \u0434\u043e M3LKT2BA (ThinkCentre M90a Gen 2), \u0434\u043e M4IKT21A (ThinkCentre M90a Gen 3), \u0434\u043e M4HKT22A (ThinkCentre M90a Gen 3 Pro), \u0434\u043e M3JKT3DA (ThinkCentre M90q Gen 2), \u0434\u043e M42KT4AA (ThinkCentre Neo 50t Gen 3), \u0434\u043e M4UKT3DA (ThinkCentre Neo 50t Gen 4), \u0434\u043e M36KT33A (Lenovo V50a-22IMB), \u0434\u043e M36KT33A (Lenovo V50a-24IMB), \u0434\u043e M2VKT23A (Lenovo V50s-07IMB), \u0434\u043e M4PKT17A (Lenovo V50t-13IMH), \u0434\u043e L2CN32WW (300w Yoga Gen 4 Laptop (Lenovo)), \u0434\u043e L2CN32WW (500w Yoga Gen 4 Laptop (Lenovo)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B3)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B4)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B5)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B6)), \u0434\u043e 1.34 (ThinkPad L14 Gen 3 Type (21C1)), \u0434\u043e 1.34 (ThinkPad L14 Gen 3 Type (21C2)), \u0434\u043e 1.34 (ThinkPad L15 Gen 3 Type (21C3)), \u0434\u043e 1.34 (ThinkPad L15 Gen 3 Type (21C4)), \u0434\u043e 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CB)), \u0434\u043e 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CC)), \u0434\u043e 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CD)), \u0434\u043e 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CE)), \u0434\u043e 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AW)), \u0434\u043e 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AX)), \u0434\u043e M3JKT3DA (ThinkStation P350 Tiny Workstation), \u0434\u043e TOE112B (ThinkSystem ST50 V2), \u0434\u043e TOE112B (ThinkSystem ST58 V2), - (14th Generation Intel Core Processor Family), \u0434\u043e S0DKT16A (P7 Intel Workstation (ThinkStation)), \u0434\u043e K1CN45WW (Legion 7 16IAX7), \u0434\u043e HMCN48WW (Lenovo Slim 7 ProX 14IAH7), \u0434\u043e J3CN55WW (Lenovo Slim 9 14IAP7), \u0434\u043e HMCN48WW (Yoga Slim 7 ProX 14IAH7), \u0434\u043e O5RKT22A (ThinkCentre Neo 50a 24 Gen 3 Desktop), \u0434\u043e O5XKT21A (ThinkCentre Neo 50a 24 Gen 4 Desktop), \u0434\u043e L2CN32WW (100w Gen 4 Laptop (Lenovo)), \u0434\u043e JLCN37WW (IdeaPad 5 14IAL7), \u0434\u043e J5CN34WW (IdeaPad 5 Pro 16IAH7), \u0434\u043e JXCN48WW (IdeaPad Duet 5 12IAU7), \u0434\u043e M7CN20WW (IdeaPad Duet 5 12IRU8), \u0434\u043e J7CN46WW (IdeaPad Flex 5 14IAU7 Laptop), \u0434\u043e J7CN46WW (IdeaPad Flex 5 16IAU7), \u0434\u043e JMCN45WW (IdeaPad Gaming 3 15IAH7 Laptop), \u0434\u043e JMCN45WW (IdeaPad Gaming 3 16IAH7), \u0434\u043e LJCN29WW (IdeaPad Pro 5 14IRH8), \u0434\u043e MHCH40WW (Legion 9 16IRX8), \u0434\u043e J7CN46WW (Lenovo Flex 7 14IAU7), \u0434\u043e LGCN28WW (Lenovo Slim 7 14IRP8), \u0434\u043e KMCN20WW (Slim 7 16IAH7 Laptop), \u0434\u043e HWCN51WW (ThinkBook 13s G4 IAP), \u0434\u043e HXCN56WW (ThinkBook 13x G2 IAP Laptop), \u0434\u043e HYCN48WW (ThinkBook 14 G4+ IAP Laptop), \u0434\u043e HYCN48WW (ThinkBook 16 G4+ IAP Laptop), \u0434\u043e LHCN22WW (Yoga 7 14IRL8), \u0434\u043e LHCN22WW (Yoga 7 16IRL8), \u0434\u043e KXCN36WW (Yoga Book 9 13IRU8), \u0434\u043e LWCN26WW (Yoga Pro 7 14IRH8), \u0434\u043e KTCN41WW (Yoga Slim 6 14IAP8), \u0434\u043e LGCN28WW (Yoga Slim 6 14IRP8), \u0434\u043e KMCN20WW (Yoga Slim 7 Pro 16IAH7 Laptop), \u0434\u043e J3CN55WW (Yoga Slim 9 14IAP7), \u0434\u043e 1.22 (ThinkPad P1 Gen 5 Type (21DC)), \u0434\u043e 1.22 (ThinkPad P1 Gen 5 Type (21DD)), \u0434\u043e 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DE)), \u0434\u043e 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DF)), \u0434\u043e 1.25 (ThinkPad X1 Nano Gen 2 Type (21E8)), \u0434\u043e 1.25 (ThinkPad X1 Nano Gen 2 Type (21E9)), - (5th Generation Intel Xeon Scalable processors), - (Intel Pentium Processor G7400), - (Intel Pentium Processor G7400T), \u0434\u043e O5RKT22A (IdeaCentre AIO 5 24IAH7), \u0434\u043e O5RKT22A (IdeaCentre AIO 5 27IAH7), \u0434\u043e 2.11 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx), 3.0 (ROSA Virtualization 3.0), 9.5 (\u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Lenovo:\nhttps://support.lenovo.com/us/en/product_security/LEN-155477\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Intel:\nhttps://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (2.11):\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f intel-microcode \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.20240312.1~deb10u1\n\n\u0414\u043b\u044f \u0420\u0435\u0434\u041e\u0421: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 intel-microcode \u0434\u043e 3.20240813.1~deb12u1+ci202409161120+astra3 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0431\u0435\u0437\u0430\u0433\u0435\u043d\u0442\u043d\u043e\u0433\u043e \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u00abROSA Virtualization 3.0\u00bb: https://abf.rosa.ru/advisories/ROSA-SA-2025-2811\n\n\u0414\u043b\u044f \u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430: https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "19.11.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "03.04.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-02524",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-38575, INTEL-SA-00982, LEN-155477",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Intel Celeron, Intel Xeon E Series, Intel Pentium Gold Series, Intel Xeon W Processor, \u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), 12th Generation Intel Core Processor Family, 13th Generation Intel Core Processor Family, 4th Generation Intel Xeon Scalable processors, 4th Generation Intel Xeon Platinum processors, 4th Generation Intel Xeon Gold Processors, 4th Generation Intel Xeon Silver Processor, 4th Generation Intel Xeon Bronze Processor, 4th Gen Intel Xeon Scalable Processors with Intel vRAN, IdeaCentre 3-07IMB05, IdeaCentre 5 14IAB7, IdeaCentre 5 14IRB8, IdeaCentre Gaming 5 17IAB7, Legion T5 26IRB8, Legion T7 34IRZ8, LOQ 17IRB8, ThinkCentre M70c, ThinkCentre M70q Gen 2, ThinkCentre M90a, ThinkCentre M90a Gen 2, ThinkCentre M90a Gen 3, ThinkCentre M90a Gen 3 Pro, ThinkCentre M90q Gen 2, ThinkCentre Neo 50t Gen 3, ThinkCentre Neo 50t Gen 4, Lenovo V50a-22IMB, Lenovo V50a-24IMB, Lenovo V50s-07IMB, Lenovo V50t-13IMH, 300w Yoga Gen 4 Laptop (Lenovo), 500w Yoga Gen 4 Laptop (Lenovo), ThinkPad L13 Gen 3 Type (21B3), ThinkPad L13 Gen 3 Type (21B4), ThinkPad L13 Gen 3 Type (21B5), ThinkPad L13 Gen 3 Type (21B6), ThinkPad L14 Gen 3 Type (21C1), ThinkPad L14 Gen 3 Type (21C2), ThinkPad L15 Gen 3 Type (21C3), ThinkPad L15 Gen 3 Type (21C4), ThinkPad X1 Carbon 10th Gen Type (21CB), ThinkPad X1 Carbon 10th Gen Type (21CC), ThinkPad X1 Yoga 7th Gen Type (21CD), ThinkPad X1 Yoga 7th Gen Type (21CE), ThinkPad X13 Yoga Gen 3 Type (21AW), ThinkPad X13 Yoga Gen 3 Type (21AX), ThinkStation P350 Tiny Workstation, ThinkSystem ST50 V2, ThinkSystem ST58 V2, 14th Generation Intel Core Processor Family, P7 Intel Workstation (ThinkStation), Legion 7 16IAX7, Lenovo Slim 7 ProX 14IAH7, Lenovo Slim 9 14IAP7, Yoga Slim 7 ProX 14IAH7, ThinkCentre Neo 50a 24 Gen 3 Desktop, ThinkCentre Neo 50a 24 Gen 4 Desktop, 100w Gen 4 Laptop (Lenovo), IdeaPad 5 14IAL7, IdeaPad 5 Pro 16IAH7, IdeaPad Duet 5 12IAU7, IdeaPad Duet 5 12IRU8, IdeaPad Flex 5 14IAU7 Laptop, IdeaPad Flex 5 16IAU7, IdeaPad Gaming 3 15IAH7 Laptop, IdeaPad Gaming 3 16IAH7, IdeaPad Pro 5 14IRH8, Legion 9 16IRX8, Lenovo Flex 7 14IAU7, Lenovo Slim 7 14IRP8, Slim 7 16IAH7 Laptop, ThinkBook 13s G4 IAP, ThinkBook 13x G2 IAP Laptop, ThinkBook 14 G4+ IAP Laptop, ThinkBook 16 G4+ IAP Laptop, Yoga 7 14IRL8, Yoga 7 16IRL8, Yoga Book 9 13IRU8, Yoga Pro 7 14IRH8, Yoga Slim 6 14IAP8, Yoga Slim 6 14IRP8, Yoga Slim 7 Pro 16IAH7 Laptop, Yoga Slim 9 14IAP7, ThinkPad P1 Gen 5 Type (21DC), ThinkPad P1 Gen 5 Type (21DD), ThinkPad X1 Extreme Gen 5 Type (21DE), ThinkPad X1 Extreme Gen 5 Type (21DF), ThinkPad X1 Nano Gen 2 Type (21E8), ThinkPad X1 Nano Gen 2 Type (21E9), 5th Generation Intel Xeon Scalable processors, Intel Pentium Processor G7400, Intel Pentium Processor G7400T, IdeaCentre AIO 5 24IAH7, IdeaCentre AIO 5 27IAH7, \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), ROSA Virtualization 3.0 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211621308), \u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.7  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.11  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb ROSA Virtualization 3.0 3.0  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211621308), \u041e\u041e\u041e \u00ab\u041d\u0426\u041f\u0420\u00bb \u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430 9.5 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0442\u0440\u0430\u043d\u0441\u043f\u0430\u0440\u0435\u043d\u0442\u043d\u044b\u0439 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 (CWE-1303)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.lenovo.com/us/en/product_security/LEN-155477\nhttps://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.11/\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/\nhttps://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17\nhttps://abf.rosa.ru/advisories/ROSA-SA-2025-2811\nhttps://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-1303",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,5)"
}

CVE-2023-38575 (GCVE-0-2023-38575)

Vulnerability from cvelistv5 – Published: 2024-03-14 16:45 – Updated: 2025-02-13 17:01

Summary

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-27 19:25 UTC

CWE

information disclosure
CWE-1303 - Non-Transparent Sharing of Microarchitectural Resources

Assigner

intel mitre root

References

3 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…
https://security.netapp.com/advisory/ntap-2024040…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: some Intel(R) Processors

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:46:56.318Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html",
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240405-0008/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-38575",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-27T19:25:29.180109Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-27T19:25:40.916Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "some Intel(R) Processors"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "information disclosure",
              "lang": "en"
            },
            {
              "cweId": "CWE-1303",
              "description": "Non-Transparent Sharing of Microarchitectural Resources",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-04T16:05:58.808Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html",
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240405-0008/"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00003.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2023-38575",
    "datePublished": "2024-03-14T16:45:45.360Z",
    "dateReserved": "2023-08-02T03:00:04.673Z",
    "dateUpdated": "2025-02-13T17:01:56.273Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.