{
  "cveId": "CVE-2024-21853",
  "url": "https://patchblox.com/security/cve/CVE-2024-21853",
  "summary": "CVE-2024-21853 is fixed in 3 products on 1 platform, first by ALAS2023-2024-748, released October 24, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "ucode-intel: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may al...",
  "description": "Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via local access.",
  "published": "2024-10-24T22:53:00Z",
  "severity": "Medium",
  "epss": 0.00226,
  "epssPercentile": 0.13381,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "intel-microcode",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "3.20241112.1~deb12u1",
      "fix": "DEBIAN-CVE-2024-21853",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-21853",
      "released": "2024-11-13T21:15:10Z"
    },
    {
      "platform": "linux",
      "product": "intel-microcode",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "3.20241112.1",
      "fix": "DEBIAN-CVE-2024-21853",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-21853",
      "released": "2024-11-13T21:15:10Z"
    },
    {
      "platform": "linux",
      "product": "intel-microcode",
      "release": "Debian 14",
      "fixedVersion": "3.20241112.1",
      "fix": "DEBIAN-CVE-2024-21853",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-21853",
      "released": "2024-11-13T21:15:10Z"
    },
    {
      "platform": "linux",
      "product": "intel-microcode",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.20241112.0ubuntu0.18.04.1\u002Besm1",
      "fix": "intel-microcode 3.20241112.0ubuntu0.18.04.1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-intel-microcode-3.20241112.0ubuntu0.18.04.1-esm1",
      "released": "2024-11-13T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "intel-microcode",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.20241112.0ubuntu0.20.04.1",
      "fix": "intel-microcode 3.20241112.0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-intel-microcode-3.20241112.0ubuntu0.20.04.1",
      "released": "2024-11-13T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "intel-microcode",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.20241112.0ubuntu0.22.04.1",
      "fix": "intel-microcode 3.20241112.0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-intel-microcode-3.20241112.0ubuntu0.22.04.1",
      "released": "2024-11-13T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "intel-microcode",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.20241112.0ubuntu0.24.04.1",
      "fix": "intel-microcode 3.20241112.0ubuntu0.24.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-intel-microcode-3.20241112.0ubuntu0.24.04.1",
      "released": "2024-11-13T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "intel-microcode",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "3.20241112.0ubuntu0.24.10.1",
      "fix": "intel-microcode 3.20241112.0ubuntu0.24.10.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-intel-microcode-3.20241112.0ubuntu0.24.10.1",
      "released": "2026-01-16T01:42:23Z"
    },
    {
      "platform": "linux",
      "product": "microcode_ctl",
      "release": "amzn 2023",
      "fixedVersion": "2:2.1-53.amzn2023.0.9",
      "fix": "ALAS2023-2024-748",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-748",
      "released": "2024-10-24T22:53:00Z"
    },
    {
      "platform": "linux",
      "product": "ucode-intel",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "20241112-150200.50.1",
      "fix": "SUSE-SU-2024:4053-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4053-1",
      "released": "2024-11-26T03:36:57Z"
    },
    {
      "platform": "linux",
      "product": "ucode-intel",
      "release": "sles 15.6",
      "fixedVersion": "20241112-150200.50.1",
      "fix": "SUSE-SU-2024:4053-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4053-1",
      "released": "2024-11-26T03:36:57Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}