x86-64.net

Processor vulnerability

CVE-2024-21823

Direct access to the DSA and IAA accelerators of 4th and 5th generation Xeon Scalable can hang the platform, and in some cases corrupt memory.

Name
DSA and IAA error reporting
Vulnerability
Intel processor errata
Kind
Other
CVE published
2024-05-16 CVE record
Advisories
INTEL-SA-01084
Software with direct access to the Data Streaming Accelerator or the In-Memory Analytics Accelerator, version 1.0 of each, can cause a denial of service that needs a reboot, and in some circumstances corrupt memory and possibly escalate privilege. The fix is in system software: Linux no longer lets the accelerators be mapped directly into guests or unprivileged applications, and offers another interface for unprivileged use, which Intel’s libraries adopt.

Affected processors

2 of the 2 microarchitectures listed are affected in all or some of their models.

What the sources say of each microarchitecture.
MicroarchitectureStatusDetailSource
Emerald RapidsAffected5th generation Xeon Scalable (Emerald Rapids)intel.com
Sapphire RapidsAffected4th generation Xeon Scalable (Sapphire Rapids)intel.com

Mitigations

  • Kernel: An operating system or hypervisor update that keeps unprivileged users and guests from accessing the accelerators directly. Source.

Sources

  1. Intel: Intel DSA and Intel IAA Error Reporting
  2. INTEL-SA-01084: Intel DSA and Intel IAA Advisory