Intel Xeon-D 1712 TR: Potential Buffer Overflow When Handling UEFI Variables

[Swapna-]

Hi Intel Team,

I came across this link

https://www.tomshardware.com/pc-components/cpus/firmware-flaw-affects-numerous-generations-of-intel-cpus-uefi-code-execution-vulnerability-found-for-intel-cpus-from-14th-gen-raptor-lake-to-6th-gen-skylake-cpus.

This indicates a possible buffer overflow issue on intel chipsets from gen14 to gen6. We are using Intel Xeon-D 1712 TR processor and would like to know if our chipset is affected.

It appears our processor belongs to Icelake D and it is shown in the list but unsure if our processor uses Phoenix SecureCore. Could you please confirm?

Thanks,

Swapna

[NormanS_Intel]

Hello Swapna-,

Thank you for posting in the community!

To ensure you receive the most specialized assistance, we have a dedicated forum that addresses these specific concerns. Therefore, I will be moving this discussion to our Server Forum. This will allow our knowledgeable community and experts to provide you with timely and accurate solutions.

Best regards,

Norman S.

Intel Customer Support Engineer

[Sazirah]

Hi Swapna-,

Thank you for posting in Intel Ethernet Communities.

Regarding the issue reported, please be inform that we have our dedicated Intel Embedded team experts in this product Intel Xeon D. We will be moving this forum thread to the dedicated team and please give them some time as they will attend to your enquiry soon.

Alternatively, we recommend you to contact your Intel account representative (e.g. FAE) regarding this issue, or if you dont have any representative, you can contact nearest Intel authorized distributors to discuss on this issue.

Regards,

Sazzy_Intel

[Diego_INTEL]

Hello @Swapna-,

Thank you for contacting Intel Embedded Community.

As I understand, Phoenix SecureCore is the name of their UEFI, if your board uses AMI, I think it is not affected.

Just in case, it seems the mitigations are available, so you don't have to worry about, you may check with your vendor to get further help and if a firmware update should be performed.

https://www.phoenix.com/security-notifications/cve-2024-0762/

Best regards,

@Diego_INTEL