Fixed CVEs in microcode_ctl: CVE-2020-24511, CVE-2020-24512, CVE-2020-24489, CVE-2020-24513

{
  "id": "d2e869bee97045796e554ed1148d53e9b4b5d624843c0c0f2ab05a292275011a",
  "url": "https://osv.dev/vulnerability/CLSA-2021-1634922771",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Fixed CVEs in microcode_ctl: CVE-2020-24511, CVE-2020-24512, CVE-2020-24489, CVE-2020-24513",
    "summary": "- Do not use \"grep -q\" in a pipe in check_caveats. - Update Intel CPU microcode to microcode-20210608 release: - Fixes in releasenote.md file. - Update Intel CPU microcode to microcode-20210525 release, addresses CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513 (#1962659, #1962709, #1962729, #1962675): - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010; - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0; - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0; - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f; - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04) at revision 0xb00000f; - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05) at revision 0xb00000f; - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f; - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16; - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c; - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11; - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d; - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40; - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea; - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up to 0xb00003e; - Update of 06-55-",
    "evidence": "osv:CLSA-2021-1634922771",
    "products": [
      {
        "name": {
          "value": "microcode_ctl",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "2:1.17-33.34.el6.cloudlinux.els",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CLSA-2021-1634922771",
      "aliases": [
        "CLSA-2021-1634922771"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "2:1.17-33.34.el6.cloudlinux.els"
                }
              ]
            }
          ],
          "package": {
            "name": "microcode_ctl",
            "purl": "pkg:rpm/tuxcare/microcode_ctl?distro=oraclelinux-6",
            "ecosystem": "TuxCare:OracleLinux:6"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1634922771.json"
          }
        }
      ],
      "modified": "2026-10-21T10:47:26.740909985Z",
      "provider": "osv",
      "upstream": [
        "CVE-2020-24489",
        "CVE-2020-24511",
        "CVE-2020-24512",
        "CVE-2020-24513"
      ],
      "references": [
        "https://errata.cloudlinux.com/ol6/CLSA-2021-1634922771.html"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2020-24489",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2020-24511",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2020-24512",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2020-24513",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 392345,
  "published_at": "2021-10-22T17:12:51+00:00"
}