high 8.8

CVE-2020-24489 json

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local a…

published 2021-06-09 5y ago modified 2026-10-08 last mo. also EUVD-2020-17209

cvss: 8.8; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 0.4%; EPSS 0.4% chance of exploitation in 30 days, percentile 29%
public exploits: 0; none known

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

Patch / fix

distros 8

debian ubuntu red hat suse opensuse rocky linux alpine arch linux

intel-microcode Debian 14, Debian 13, Debian 12 3.20210608.1

debian advisories DEBIAN-CVE-2020-24489

intel-microcode Ubuntu 18.04 LTS 3.20210608.0ubuntu0.18.04.1
intel-microcode Ubuntu 20.04 LTS 3.20210608.0ubuntu0.20.04.1
intel-microcode Ubuntu Pro 14.04 LTS 3.20210608.0ubuntu0.14.04.1+esm1
intel-microcode Ubuntu Pro 16.04 LTS 3.20210608.0ubuntu0.16.04.1+esm1

ubuntu advisories UBUNTU-CVE-2020-24489

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

redhat-virtualization-host rhev hypervisor 4.4 4.4.6-20210615.0.el8_4
redhat-virtualization-host-image-update rhev hypervisor 4.4 4.4.6-20210615.0.el8_4
microcode_ctl RHEL 8 4:20210216-1.20210525.1.el8_4
microcode_ctl RHEL 7 2:2.1-73.9.el7_9
microcode_ctl RHEL 7 2:2.1-73.11.el7_9
microcode_ctl RHEL 8 4:20210216-1.20210608.1.el8_4
redhat-virtualization-host RHEL 7 4.3.16-20210615.0.el7_9
redhat-virtualization-host-image-update RHEL 7 4.3.16-20210615.0.el7_9

red hat advisories RHSA-2021:2522 RHSA-2021:2307 RHSA-2021:2308 RHSA-2021:3322 RHSA-2021:3323 RHSA-2021:2304

microcode_ctl SLES 11 SP4-LTSS, SLE Point of Sale 11 SP3 1.17-102.83.71.1
ucode-intel SLE Module for Basesystem 15 SP3, SLE Module for Basesystem 15 SP2, SLE Micro 5.0 20210525-7.1
ucode-intel SLES for SAP 15 SP1, SLES 15 SP1-LTSS, SLES 15 SP1-BCL +6 more 20210525-3.203.1
ucode-intel SLES for SAP 15, SLE High Performance Computing 15-LTSS, SLE High Performance Computing 15-ESPOS 20210525-3.67.1
ucode-intel SLES for SAP 12 SP4, SLES for SAP 12 SP3, SLES 12 SP4-LTSS +8 more 20210525-13.90.1
ucode-intel SLES for SAP 12 SP5, SLES 12 SP5 20210525-3.35.1

suse advisories SUSE-SU-2021:14758-1 SUSE-SU-2021:1933-1 SUSE-SU-2021:1932-1 SUSE-SU-2021:1931-1 SUSE-SU-2021:1930-1 SUSE-SU-2021:1929-1

ucode-intel openSUSE Tumbleweed 20210608-1.2
ucode-intel openSUSE Leap 15.3 20210525-7.1
ucode-intel openSUSE Leap 15.2 20210525-lp152.2.17.1

opensuse advisories openSUSE-SU-2024:11478-1 openSUSE-SU-2021:1933-1 openSUSE-SU-2021:0876-1

microcode_ctl Rocky Linux 8 4:20210216-1.20210608.1.el8_4
microcode_ctl Rocky Linux 8 4:20210216-1.20210525.1.el8_4

rocky linux advisories RLSA-2021:3027 RLSA-2021:2308

intel-ucode Alpine 3.24, Alpine 3.23, Alpine 3.22 +10 more 20210608-r0

alpine advisories ALPINE-CVE-2020-24489

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

intel-ucode Arch Linux 20210608-1

arch linux advisories AVG-2051

Is CVE-2020-24489 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2020-24489 updated 2026-10-08 cvss 8.8

hw: vt-d related privilege escalation

Red Hat Enterprise Linux BaseOS (v. 8) microcode_ctl 20210216-1.20210525.1.el8_4, microcode_ctl 20210216-1.20210608.1.el8_4
fixed: vendor fix RHSA-2021:2308
Red Hat Enterprise Linux BaseOS EUS (v. 8.1) microcode_ctl 20190618-1.20210525.1.el8_1, microcode_ctl 20190618-1.20210608.1.el8_1
fixed: vendor fix RHSA-2021:2306
Red Hat Enterprise Linux BaseOS EUS (v. 8.2) microcode_ctl 20191115-4.20210525.1.el8_2, microcode_ctl 20191115-4.20210608.1.el8_2
fixed: vendor fix RHSA-2021:2307
Red Hat Enterprise Linux Client (v. 7) microcode_ctl 2.1-73.9.el7_9, microcode_ctl 2.1-73.11.el7_9
fixed: vendor fix RHSA-2021:3028
Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) microcode_ctl 2.1-53.16.el7_7, microcode_ctl 2.1-53.18.el7_7
fixed: vendor fix RHSA-2021:2304
Red Hat Enterprise Linux Server (v. 6 ELS) microcode_ctl 1.17-33.33.el6_10
fixed: vendor fix RHSA-2021:2299
Red Hat Enterprise Linux Server (v. 7) microcode_ctl 2.1-73.9.el7_9, microcode_ctl 2.1-73.11.el7_9
fixed: vendor fix RHSA-2021:3028
Red Hat Enterprise Linux Server AUS (v. 7.2) microcode_ctl 2.1-12.37.el7_2, microcode_ctl 2.1-12.39.el7_2
fixed: vendor fix RHSA-2021:2300

show 13 more

Red Hat Enterprise Linux Server AUS (v. 7.3) microcode_ctl 2.1-16.40.el7_3, microcode_ctl 2.1-16.42.el7_3
fixed: vendor fix RHSA-2021:2302
Red Hat Enterprise Linux Server AUS (v. 7.4) microcode_ctl 2.1-22.39.el7_4, microcode_ctl 2.1-22.41.el7_4
fixed: vendor fix RHSA-2021:2301
Red Hat Enterprise Linux Server AUS (v. 7.6) microcode_ctl 2.1-47.21.el7_6, microcode_ctl 2.1-47.23.el7_6
fixed: vendor fix RHSA-2021:2303
Red Hat Enterprise Linux Server E4S (v. 7.4) microcode_ctl 2.1-22.39.el7_4, microcode_ctl 2.1-22.41.el7_4
fixed: vendor fix RHSA-2021:2301
Red Hat Enterprise Linux Server E4S (v. 7.6) microcode_ctl 2.1-47.21.el7_6, microcode_ctl 2.1-47.23.el7_6
fixed: vendor fix RHSA-2021:2303
Red Hat Enterprise Linux Server EUS (v. 7.7) microcode_ctl 2.1-53.16.el7_7, microcode_ctl 2.1-53.18.el7_7
fixed: vendor fix RHSA-2021:2304
Red Hat Enterprise Linux Server TUS (v. 7.4) microcode_ctl 2.1-22.39.el7_4, microcode_ctl 2.1-22.41.el7_4
fixed: vendor fix RHSA-2021:2301
Red Hat Enterprise Linux Server TUS (v. 7.6) microcode_ctl 2.1-47.21.el7_6, microcode_ctl 2.1-47.23.el7_6
fixed: vendor fix RHSA-2021:2303
Red Hat Enterprise Linux Workstation (v. 7) microcode_ctl 2.1-73.9.el7_9, microcode_ctl 2.1-73.11.el7_9
fixed: vendor fix RHSA-2021:3028
Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host 4.3.16-20210615.0.el7_9, redhat-virtualization-host-image-update 4.3.16-20210615.0.el7_9
fixed: vendor fix RHSA-2021:2519
Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host 4.4.6-20210615.0.el8_4, redhat-virtualization-host-image-update 4.4.6-20210615.0.el8_4
fixed: vendor fix RHSA-2021:2522
Red Hat RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-virtualization-host 4.3.16-20210615.0.el7_9, redhat-virtualization-host-image-update 4.3.16-20210615.0.el7_9
fixed: vendor fix RHSA-2021:2519
Red Hat RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-release-virtualization-host 4.3.16-1.el7ev, redhat-virtualization-host-image-update-placeholder 4.3.16-1.el7ev Red Hat RHEL 8-based RHEV-H for RHEV 4 (build requirements) redhat-release-virtualization-host 4.4.6-2.el8ev, redhat-virtualization-host-image-update-placeholder 4.4.6-2.el8ev
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-23-122-01 updated 2023-05-02 cvss 8.8

Mitsubishi Electric Factory Automation Products

Mitsubishi Electric MELIPC MI1002-W Mitsubishi Electric MELIPC MI2012-W Mitsubishi Electric MELIPC MI3315G-W Mitsubishi Electric MELIPC MI3321G-W Mitsubishi Electric MELIPC MI5122-VM Mitsubishi Electric MELSEC iQ-R R102WCPU-W

+4 more productsfewer

Mitsubishi Electric MELSEC Q Q24DHCCPU-LS Mitsubishi Electric MELSEC Q Q24DHCCPU-V Mitsubishi Electric MELSEC Q Q24DHCCPU-VG Mitsubishi Electric MELSEC Q Q26DHCCPU-LS

affected: vendor fix intel.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: last mo. (2026-10-08)

Exploit prediction

0.35% chance of exploitation in the next 30 days, higher than 29% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
NVD	3.1	8.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD	2.0	4.6	AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

n/a Intel(R) VT-d products

Classification

Weakness

CWE-459 Incomplete Cleanup

References

debian.org /security/2021/dsa-4934
vendor-advisory, third-party-advisory
intel.com /content/www/us/en/security-center/advisory/intel-sa-00442.html
vendor-advisory
lists.debian.org /debian-lts-announce/2021/07/msg00022.html
mailing-list, third-party-advisory

Sources

CVE List CVE-2020-24489
NVD CVE-2020-24489

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

json all entries feed