CVE-2024-24853

highpriority · track · 0EPSS 0.002 · 13 %ileDEEURU

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.23% (13th) EPSS

CVSS 7.2 · high

Is it mine?

47 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-21

Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixeducode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-150200.62.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-158.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-158.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmicrocode_ctl-0:1.17-102.83.90.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-1.1.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-slfo.1.1_1.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeducode-intel-0:20260210-160000.1.1.x86_64 as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technical severity, 0–10. One row per scoring source.

7.3

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.1–7.3

v3.17.2highAV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.2highCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:Hsecondary · secure@intel.comexploitability 0.6 · impact 6

v3.17.2highCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:Hsecondary · SUSE Product Security

v4.07.3highCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:Hsecondary · ENISA EU

v4.07.3highCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · secure@intel.com

v4.04.1mediumCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-696USCWE-696US

affected products (47)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Dell Avamar Gen5a <Hotfix 338868all versionscert_bundDE
Dell BIOSall versionscert_bundDEcpe:/h:dell:bios:-
Dell PowerScale <12.4.1all versionscert_bundDE
HP Computer SimpliVity Serverall versionscert_bundDEcpe:/h:hp:computer:simplivity_server
HPE ProLiantall versionscert_bundDEcpe:/h:hp:proliant:-
HPE ProLiant Alletra 4140 <2.16_03-01-2024all versionscert_bundDE
HPE ProLiant BIOS <2.10_11-28-2023all versionscert_bundDE
HPE ProLiant BIOS <2.20_08-07-2024all versionscert_bundDE
HPE Synergy 480 Gen11 Compute Module <2.10_11-28-2023all versionscert_bundDE
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
Dell Avamar≤ Gen5a <Hotfix 338868cert_bundDE
Dell PowerScale OneFS< 12.4.1cert_bundDE
HPE ProLiant≤ BIOS <2.10_11-28-2023cert_bundDE
HPE ProLiant≤ Alletra 4140 <2.16_03-01-2024cert_bundDE
HPE ProLiant≤ BIOS <2.20_08-07-2024cert_bundDE
HPE Synergy≤ 480 Gen11 Compute Module <2.10_11-28-2023cert_bundDE
n/a Intel(R) Processor≤ See referencesenisa_euvdEU
Intel Corp. 10th Generation Intel Core Processor Familyall versionsfstec_bduRU
Intel Corp. 11th Generation Intel Core Processor Familyall versionsfstec_bduRU

showing 20 of 47

advisories (9)

Vendor and ecosystem advisories describing this.

SUSE-SU-2026:0668-1Security update for ucode-intel2026-02-26csaf · suse_csafDE
Security update for ucode-intel
SUSE-SU-2026:0669-1Security update for ucode-intel2026-02-26csaf · suse_csafDE
Security update for ucode-intel
SUSE-SU-2026:0670-1Security update for ucode-intel2026-02-26csaf · suse_csafDE
Security update for ucode-intel
SUSE-SU-2026:20522-1Security update for ucode-intel2026-02-26csaf · suse_csafDE
Security update for ucode-intel
SUSE-SU-2026:20682-1Security update for ucode-intel2026-03-06csaf · suse_csafDE
Security update for ucode-intel
SUSE-SU-2026:20758-1Security update for ucode-intel2026-03-19csaf · suse_csafDE
Security update for ucode-intel
SUSE-SU-2026:20941-1Security update for ucode-intel2026-03-19csaf · suse_csafDE
Security update for ucode-intel
WID-SEC-W-2024-1842HPE ProLiant undSynergy: Mehrere Schwachstellen ermöglichen PrivilegieneskalationDeutsch2024-08-13csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in HPE ProLiant und HPE Synergy ausnutzen, um seine Privilegien zu erhöhen.
openSUSE-SU-2026:20401-1Security update for ucode-intel2026-03-19csaf · suse_csafDE
Security update for ucode-intel

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund suse_csaf NVD CVE.org MITRE

published 2024-08-14modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan