Intel security advisory (AV23-260)

From: Canadian Centre for Cyber Security

Serial number: AV23-260
Date: May 10, 2023

On May 9, 2023, Intel published Security Advisories to address vulnerabilities in multiple products. Included were updates for the following:

  • Data Center Manager (DCM) software – versions prior to 5.1
  • i915 Graphics for Linux – kernel versions prior to V1.0.3.1
  • Intel Processors – multiple versions
  • NUC firmware – multiple versions and platforms
  • oneAPI HPC Toolkit – versions prior to 2023.0.0
  • One Boot Flash Update (OFU) software – versions prior to 14.1.30
  • QuickAssist Technology (QAT) Engine for OpenSSL – versions prior to 0.6.16
  • QuickAssist Technology (QAT) driver for Windows – versions prior to 1.9.0
  • Retail Edge Mobile application – multiple versions and platforms
  • Server Board M50CYP/ D50TNP Family – BMC firmware prior to version 2.90
  • System Usage Report (SUR) software – versions prior to 2.4.8989
  • Trace Analyzer and Collector software – versions prior to 2021.8.0 Dec 2022
  • Virtual RAID on CPU (VROC) software – versions prior to 7.7.6.1003
  • WULT software maintained by Intel – versions prior to 1.0.0 (commit id 592300b)

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

Date modified: