---
id: CVE-2020-24489
title: >-
  Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated
  user to potentially enable escalation of privilege via local access.
summary: >-
  Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated
  user to potentially enable escalation of privilege via local access.
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
cwe:
  - CWE-459
vendor: intel
product: atom_x5-e3930
affected:
  - atom_x5-e3930
  - atom_x5-e3940
  - atom_x7-e3950
  - celeron_j1750
  - celeron_j1800
  - celeron_j1850
  - celeron_j1900
  - celeron_j3060
  - celeron_j3160
  - celeron_j3355
  - celeron_j3355e
  - celeron_j3455
  - celeron_j3455e
  - celeron_j4005
  - celeron_j4025
  - celeron_j4105
  - celeron_j4115
  - celeron_j4125
  - celeron_j6412
  - celeron_j6413
  - celeron_n2805
  - celeron_n2806
  - celeron_n2807
  - celeron_n2808
  - celeron_n2810
  - celeron_n2815
  - celeron_n2820
  - celeron_n2830
  - celeron_n2840
  - celeron_n2910
  - celeron_n2920
  - celeron_n2930
  - celeron_n2940
  - celeron_n3000
  - celeron_n3010
  - celeron_n3050
  - celeron_n3060
  - celeron_n3150
  - celeron_n3160
  - celeron_n3350
  - celeron_n3350e
  - celeron_n3450
  - celeron_n4000
  - celeron_n4000c
  - celeron_n4020
  - celeron_n4020c
  - celeron_n4100
  - celeron_n4120
  - celeron_n4500
  - celeron_n4505
  - celeron_n5095
  - celeron_n5100
  - celeron_n5105
  - celeron_n6210
  - celeron_n6211
  - core_i3-1000g1
  - core_i3-1000g4
  - core_i3-1000ng4
  - core_i3-1005g1
  - core_i3-10100
  - core_i3-10100e
  - core_i3-10100f
  - core_i3-10100t
  - core_i3-10100te
  - core_i3-10100y
  - core_i3-10105
  - core_i3-10105f
  - core_i3-10105t
  - core_i3-10110u
  - core_i3-10110y
  - core_i3-10300
  - core_i3-10300t
  - core_i3-10305
  - core_i3-10305t
  - core_i3-10320
  - core_i3-10325
  - core_i3-11100b
  - core_i3-1110g4
  - core_i3-1115g4
  - core_i3-1115g4e
  - core_i3-1115gre
  - core_i3-1120g4
  - core_i3-1125g4
  - core_i3-l13g4
  - core_i5-10200h
  - core_i5-10210u
  - core_i5-10210y
  - core_i5-10300h
  - core_i5-1030g4
  - core_i5-1030g7
  - core_i5-1030ng7
  - core_i5-10310u
  - core_i5-10310y
  - core_i5-1035g1
  - core_i5-1035g4
  - core_i5-1035g7
  - core_i5-1038ng7
  - core_i5-10400
  - core_i5-10400f
  - core_i5-10400h
published: '2021-06-09'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T21:17:25.337'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2020-24489'
references:
  - url: 'https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html'
    label: secure@intel.com
  - url: 'https://www.debian.org/security/2021/dsa-4934'
    label: secure@intel.com
  - url: >-
      https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
    label: secure@intel.com
  - url: 'https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.debian.org/security/2021/dsa-4934'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00352
epssPercentile: 0.26724
ingestedAt: '2026-10-08T22:11:53.735Z'
---

## Overview

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

## Affected

- `atom_x5-e3930`
- `atom_x5-e3940`
- `atom_x7-e3950`
- `celeron_j1750`
- `celeron_j1800`
- `celeron_j1850`
- `celeron_j1900`
- `celeron_j3060`
- `celeron_j3160`
- `celeron_j3355`
- `celeron_j3355e`
- `celeron_j3455`
- `celeron_j3455e`
- `celeron_j4005`
- `celeron_j4025`
- `celeron_j4105`
- `celeron_j4115`
- `celeron_j4125`
- `celeron_j6412`
- `celeron_j6413`
- `celeron_n2805`
- `celeron_n2806`
- `celeron_n2807`
- `celeron_n2808`
- `celeron_n2810`
- `celeron_n2815`
- `celeron_n2820`
- `celeron_n2830`
- `celeron_n2840`
- `celeron_n2910`
- `celeron_n2920`
- `celeron_n2930`
- `celeron_n2940`
- `celeron_n3000`
- `celeron_n3010`
- `celeron_n3050`
- `celeron_n3060`
- `celeron_n3150`
- `celeron_n3160`
- `celeron_n3350`
- `celeron_n3350e`
- `celeron_n3450`
- `celeron_n4000`
- `celeron_n4000c`
- `celeron_n4020`
- `celeron_n4020c`
- `celeron_n4100`
- `celeron_n4120`
- `celeron_n4500`
- `celeron_n4505`
- `celeron_n5095`
- `celeron_n5100`
- `celeron_n5105`
- `celeron_n6210`
- `celeron_n6211`
- `core_i3-1000g1`
- `core_i3-1000g4`
- `core_i3-1000ng4`
- `core_i3-1005g1`
- `core_i3-10100`
- `core_i3-10100e`
- `core_i3-10100f`
- `core_i3-10100t`
- `core_i3-10100te`
- `core_i3-10100y`
- `core_i3-10105`
- `core_i3-10105f`
- `core_i3-10105t`
- `core_i3-10110u`
- `core_i3-10110y`
- `core_i3-10300`
- `core_i3-10300t`
- `core_i3-10305`
- `core_i3-10305t`
- `core_i3-10320`
- `core_i3-10325`
- `core_i3-11100b`
- `core_i3-1110g4`
- `core_i3-1115g4`
- `core_i3-1115g4e`
- `core_i3-1115gre`
- `core_i3-1120g4`
- `core_i3-1125g4`
- `core_i3-l13g4`
- `core_i5-10200h`
- `core_i5-10210u`
- `core_i5-10210y`
- `core_i5-10300h`
- `core_i5-1030g4`
- `core_i5-1030g7`
- `core_i5-1030ng7`
- `core_i5-10310u`
- `core_i5-10310y`
- `core_i5-1035g1`
- `core_i5-1035g4`
- `core_i5-1035g7`
- `core_i5-1038ng7`
- `core_i5-10400`
- `core_i5-10400f`
- `core_i5-10400h`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.