{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:10991",
        "url": "https://access.redhat.com/errata/RHSA-2025:10991"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366125",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10991.json"
      }
    ],
    "title": "Red Hat Security Advisory: microcode_ctl security update",
    "tracking": {
      "current_release_date": "2025-09-25T15:13:20+00:00",
      "generator": {
        "date": "2025-09-25T15:13:20+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.8"
        }
      },
      "id": "RHSA-2025:10991",
      "initial_release_date": "2025-07-14T18:06:22+00:00",
      "revision_history": [
        {
          "date": "2025-07-14T18:06:22+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-07-14T18:06:22+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-09-25T15:13:20+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 8)",
                  "product_id": "BaseOS-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20250512-1.el8_10.src",
                "product": {
                  "name": "microcode_ctl-4:20250512-1.el8_10.src",
                  "product_id": "microcode_ctl-4:20250512-1.el8_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20250512-1.el8_10?arch=src\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20250512-1.el8_10.x86_64",
                "product": {
                  "name": "microcode_ctl-4:20250512-1.el8_10.x86_64",
                  "product_id": "microcode_ctl-4:20250512-1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20250512-1.el8_10?arch=x86_64\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20250512-1.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src"
        },
        "product_reference": "microcode_ctl-4:20250512-1.el8_10.src",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20250512-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
        },
        "product_reference": "microcode_ctl-4:20250512-1.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "cwe": {
        "id": "CWE-1421",
        "name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:30.376335+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
          "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:56.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-14T18:06:22+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10991"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2024-43420",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:09.641634+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366159"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
          "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366159",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:09.384000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-14T18:06:22+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10991"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2024-45332",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:16.220402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
          "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
          "url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:12.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-14T18:06:22+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10991"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-20012",
      "cwe": {
        "id": "CWE-696",
        "name": "Incorrect Behavior Order"
      },
      "discovery_date": "2025-05-13T22:02:43.991918+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
          "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        }
      ],
      "release_date": "2025-05-13T21:01:33.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-14T18:06:22+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10991"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2025-20623",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:55.575358+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
          "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:02:26.040000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-14T18:06:22+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10991"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-24495",
      "cwe": {
        "id": "CWE-1419",
        "name": "Incorrect Initialization of Resource"
      },
      "discovery_date": "2025-05-13T22:01:12.147444+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
          "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:51.390000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-14T18:06:22+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10991"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
          "product_ids": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nBug Fix(es) and Enhancement(s):\n\n* Update microcode_ctl to latest upstream [rhel-9.6.z] (JIRA:RHEL-96929)\n\n* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91226)\n\n* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91233)\n\n* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91241)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2025:9433",
        "url": "https://access.redhat.com/errata/RHBA-2025:9433"
      },
      {
        "category": "external",
        "summary": "RHEL-96929",
        "url": "https://issues.redhat.com/browse/RHEL-96929"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_9433.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2025-09-25T11:28:10+00:00",
      "generator": {
        "date": "2025-09-25T11:28:10+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.8"
        }
      },
      "id": "RHBA-2025:9433",
      "initial_release_date": "2025-06-24T02:16:25+00:00",
      "revision_history": [
        {
          "date": "2025-06-24T02:16:25+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-06-24T02:16:25+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-09-25T11:28:10+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                  "product_id": "BaseOS-9.6.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
                "product": {
                  "name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
                  "product_id": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20250211-1.20250512.1.el9_6?arch=src\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
                "product": {
                  "name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
                  "product_id": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20250211-1.20250512.1.el9_6?arch=noarch\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch"
        },
        "product_reference": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        },
        "product_reference": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "cwe": {
        "id": "CWE-1421",
        "name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:30.376335+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:56.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-24T02:16:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:9433"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2024-43420",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:09.641634+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366159"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366159",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:09.384000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-24T02:16:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:9433"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2024-45332",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:16.220402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
          "url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:12.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-24T02:16:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:9433"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-20012",
      "cwe": {
        "id": "CWE-696",
        "name": "Incorrect Behavior Order"
      },
      "discovery_date": "2025-05-13T22:02:43.991918+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        }
      ],
      "release_date": "2025-05-13T21:01:33.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-24T02:16:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:9433"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2025-20623",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:55.575358+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:02:26.040000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-24T02:16:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:9433"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-24495",
      "cwe": {
        "id": "CWE-1419",
        "name": "Incorrect Initialization of Resource"
      },
      "discovery_date": "2025-05-13T22:01:12.147444+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:51.390000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-24T02:16:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:9433"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2025-24495)\n\n* microcode_ctl: From CVEorg collector (CVE-2025-20012)\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:10102",
        "url": "https://access.redhat.com/errata/RHSA-2025:10102"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366089",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
      },
      {
        "category": "external",
        "summary": "2366114",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
      },
      {
        "category": "external",
        "summary": "2366125",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10102.json"
      }
    ],
    "title": "Red Hat Security Advisory: microcode_ctl security update",
    "tracking": {
      "current_release_date": "2025-09-25T15:11:41+00:00",
      "generator": {
        "date": "2025-09-25T15:11:41+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.8"
        }
      },
      "id": "RHSA-2025:10102",
      "initial_release_date": "2025-07-01T14:55:04+00:00",
      "revision_history": [
        {
          "date": "2025-07-01T14:55:04+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-07-01T14:55:04+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-09-25T15:11:41+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
                  "product_id": "BaseOS-9.2.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_e4s:9.2::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src",
                "product": {
                  "name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src",
                  "product_id": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20220809-2.20250512.1.el9_2?arch=src\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
                "product": {
                  "name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
                  "product_id": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20220809-2.20250512.1.el9_2?arch=noarch\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch"
        },
        "product_reference": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
        },
        "product_reference": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "cwe": {
        "id": "CWE-1421",
        "name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:30.376335+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
          "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:56.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T14:55:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10102"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2024-43420",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:09.641634+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366159"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
          "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366159",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:09.384000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T14:55:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10102"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2024-45332",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:16.220402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
          "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
          "url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:12.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T14:55:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10102"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-20012",
      "cwe": {
        "id": "CWE-696",
        "name": "Incorrect Behavior Order"
      },
      "discovery_date": "2025-05-13T22:02:43.991918+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
          "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        }
      ],
      "release_date": "2025-05-13T21:01:33.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T14:55:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10102"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2025-20623",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:55.575358+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
          "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:02:26.040000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T14:55:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10102"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-24495",
      "cwe": {
        "id": "CWE-1419",
        "name": "Incorrect Initialization of Resource"
      },
      "discovery_date": "2025-05-13T22:01:12.147444+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
          "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:51.390000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T14:55:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10102"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
            "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2025-24495)\n\n* microcode_ctl: From CVEorg collector (CVE-2025-20012)\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:10103",
        "url": "https://access.redhat.com/errata/RHSA-2025:10103"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366089",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
      },
      {
        "category": "external",
        "summary": "2366114",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
      },
      {
        "category": "external",
        "summary": "2366125",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10103.json"
      }
    ],
    "title": "Red Hat Security Advisory: microcode_ctl security update",
    "tracking": {
      "current_release_date": "2025-09-25T15:11:41+00:00",
      "generator": {
        "date": "2025-09-25T15:11:41+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.8"
        }
      },
      "id": "RHSA-2025:10103",
      "initial_release_date": "2025-07-01T14:44:03+00:00",
      "revision_history": [
        {
          "date": "2025-07-01T14:44:03+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-07-01T14:44:03+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-09-25T15:11:41+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
                  "product_id": "BaseOS-9.0.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_e4s:9.0::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src",
                "product": {
                  "name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src",
                  "product_id": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20220207-1.20250512.1.el9_0?arch=src\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
                "product": {
                  "name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
                  "product_id": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20220207-1.20250512.1.el9_0?arch=noarch\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch"
        },
        "product_reference": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
        },
        "product_reference": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "cwe": {
        "id": "CWE-1421",
        "name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:30.376335+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
          "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:56.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T14:44:03+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10103"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2024-43420",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:09.641634+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366159"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
          "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366159",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:09.384000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T14:44:03+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10103"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2024-45332",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:16.220402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
          "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
          "url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:12.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T14:44:03+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10103"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-20012",
      "cwe": {
        "id": "CWE-696",
        "name": "Incorrect Behavior Order"
      },
      "discovery_date": "2025-05-13T22:02:43.991918+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
          "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        }
      ],
      "release_date": "2025-05-13T21:01:33.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T14:44:03+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10103"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2025-20623",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:55.575358+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
          "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:02:26.040000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T14:44:03+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10103"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-24495",
      "cwe": {
        "id": "CWE-1419",
        "name": "Incorrect Initialization of Resource"
      },
      "discovery_date": "2025-05-13T22:01:12.147444+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
          "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:51.390000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T14:44:03+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10103"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
          "product_ids": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
            "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:10107",
        "url": "https://access.redhat.com/errata/RHSA-2025:10107"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366125",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10107.json"
      }
    ],
    "title": "Red Hat Security Advisory: microcode_ctl security update",
    "tracking": {
      "current_release_date": "2025-09-25T15:11:42+00:00",
      "generator": {
        "date": "2025-09-25T15:11:42+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.8"
        }
      },
      "id": "RHSA-2025:10107",
      "initial_release_date": "2025-07-01T15:33:58+00:00",
      "revision_history": [
        {
          "date": "2025-07-01T15:33:58+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-07-01T15:33:58+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-09-25T15:11:42+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
                  "product_id": "BaseOS-8.4.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:8.4::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
                "product": {
                  "name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
                  "product_id": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20210216-1.20250512.1.el8_4?arch=src\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64",
                "product": {
                  "name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64",
                  "product_id": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20210216-1.20250512.1.el8_4?arch=x86_64\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
          "product_id": "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src"
        },
        "product_reference": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
        "relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
          "product_id": "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
        },
        "product_reference": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64",
        "relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "cwe": {
        "id": "CWE-1421",
        "name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:30.376335+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
          "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:56.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:33:58+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10107"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2024-43420",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:09.641634+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366159"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
          "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366159",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:09.384000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:33:58+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10107"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2024-45332",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:16.220402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
          "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
          "url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:12.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:33:58+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10107"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-20012",
      "cwe": {
        "id": "CWE-696",
        "name": "Incorrect Behavior Order"
      },
      "discovery_date": "2025-05-13T22:02:43.991918+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
          "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        }
      ],
      "release_date": "2025-05-13T21:01:33.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:33:58+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10107"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2025-20623",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:55.575358+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
          "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:02:26.040000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:33:58+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10107"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-24495",
      "cwe": {
        "id": "CWE-1419",
        "name": "Incorrect Initialization of Resource"
      },
      "discovery_date": "2025-05-13T22:01:12.147444+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
          "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:51.390000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:33:58+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10107"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
          "product_ids": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
            "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:10111",
        "url": "https://access.redhat.com/errata/RHSA-2025:10111"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366125",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10111.json"
      }
    ],
    "title": "Red Hat Security Advisory: microcode_ctl security update",
    "tracking": {
      "current_release_date": "2025-09-25T15:11:43+00:00",
      "generator": {
        "date": "2025-09-25T15:11:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.8"
        }
      },
      "id": "RHSA-2025:10111",
      "initial_release_date": "2025-07-01T15:49:13+00:00",
      "revision_history": [
        {
          "date": "2025-07-01T15:49:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-07-01T15:49:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-09-25T15:11:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server AUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server AUS (v. 7.7)",
                  "product_id": "7Server-7.7.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:7.7::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-2:2.1-53.26.el7_7.1.src",
                "product": {
                  "name": "microcode_ctl-2:2.1-53.26.el7_7.1.src",
                  "product_id": "microcode_ctl-2:2.1-53.26.el7_7.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@2.1-53.26.el7_7.1?arch=src\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
                "product": {
                  "name": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
                  "product_id": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@2.1-53.26.el7_7.1?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64",
                "product": {
                  "name": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64",
                  "product_id": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl-debuginfo@2.1-53.26.el7_7.1?arch=x86_64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-2:2.1-53.26.el7_7.1.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
          "product_id": "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src"
        },
        "product_reference": "microcode_ctl-2:2.1-53.26.el7_7.1.src",
        "relates_to_product_reference": "7Server-7.7.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
          "product_id": "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64"
        },
        "product_reference": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
        "relates_to_product_reference": "7Server-7.7.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
          "product_id": "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
        },
        "product_reference": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64",
        "relates_to_product_reference": "7Server-7.7.AUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "cwe": {
        "id": "CWE-1421",
        "name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:30.376335+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
          "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
          "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:56.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:49:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10111"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2024-43420",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:09.641634+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366159"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
          "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
          "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366159",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:09.384000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:49:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10111"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2024-45332",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:16.220402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
          "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
          "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
          "url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:12.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:49:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10111"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-20012",
      "cwe": {
        "id": "CWE-696",
        "name": "Incorrect Behavior Order"
      },
      "discovery_date": "2025-05-13T22:02:43.991918+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
          "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
          "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        }
      ],
      "release_date": "2025-05-13T21:01:33.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:49:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10111"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2025-20623",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:55.575358+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
          "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
          "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:02:26.040000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:49:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10111"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-24495",
      "cwe": {
        "id": "CWE-1419",
        "name": "Incorrect Initialization of Resource"
      },
      "discovery_date": "2025-05-13T22:01:12.147444+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
          "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
          "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:51.390000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:49:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10111"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
          "product_ids": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
            "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
            "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:10162",
        "url": "https://access.redhat.com/errata/RHSA-2025:10162"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366125",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10162.json"
      }
    ],
    "title": "Red Hat Security Advisory: microcode_ctl security update",
    "tracking": {
      "current_release_date": "2025-09-25T15:11:47+00:00",
      "generator": {
        "date": "2025-09-25T15:11:47+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.8"
        }
      },
      "id": "RHSA-2025:10162",
      "initial_release_date": "2025-07-01T19:48:14+00:00",
      "revision_history": [
        {
          "date": "2025-07-01T19:48:14+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-07-01T19:48:14+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-09-25T15:11:47+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
                  "product_id": "BaseOS-8.8.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_e4s:8.8::baseos"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
                  "product_id": "BaseOS-8.8.0.Z.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_tus:8.8::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
                "product": {
                  "name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
                  "product_id": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20220809-2.20250512.1.el8_8?arch=src\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
                "product": {
                  "name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
                  "product_id": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20220809-2.20250512.1.el8_8?arch=x86_64\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src"
        },
        "product_reference": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
        },
        "product_reference": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src"
        },
        "product_reference": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
        },
        "product_reference": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "cwe": {
        "id": "CWE-1421",
        "name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:30.376335+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
          "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
          "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
          "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:56.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T19:48:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10162"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2024-43420",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:09.641634+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366159"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
          "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
          "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
          "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366159",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:09.384000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T19:48:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10162"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2024-45332",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:16.220402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
          "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
          "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
          "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
          "url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:12.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T19:48:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10162"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-20012",
      "cwe": {
        "id": "CWE-696",
        "name": "Incorrect Behavior Order"
      },
      "discovery_date": "2025-05-13T22:02:43.991918+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
          "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
          "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
          "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        }
      ],
      "release_date": "2025-05-13T21:01:33.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T19:48:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10162"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2025-20623",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:55.575358+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
          "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
          "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
          "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:02:26.040000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T19:48:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10162"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-24495",
      "cwe": {
        "id": "CWE-1419",
        "name": "Incorrect Initialization of Resource"
      },
      "discovery_date": "2025-05-13T22:01:12.147444+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
          "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
          "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
          "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:51.390000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T19:48:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10162"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
          "product_ids": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
            "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:10108",
        "url": "https://access.redhat.com/errata/RHSA-2025:10108"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366125",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10108.json"
      }
    ],
    "title": "Red Hat Security Advisory: microcode_ctl security update",
    "tracking": {
      "current_release_date": "2025-09-25T15:11:43+00:00",
      "generator": {
        "date": "2025-09-25T15:11:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.8"
        }
      },
      "id": "RHSA-2025:10108",
      "initial_release_date": "2025-07-01T15:39:18+00:00",
      "revision_history": [
        {
          "date": "2025-07-01T15:39:18+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-07-01T15:39:18+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-09-25T15:11:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
                  "product_id": "7Server-ELS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_els:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-2:2.1-73.24.el7_9.src",
                "product": {
                  "name": "microcode_ctl-2:2.1-73.24.el7_9.src",
                  "product_id": "microcode_ctl-2:2.1-73.24.el7_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@2.1-73.24.el7_9?arch=src\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-2:2.1-73.24.el7_9.x86_64",
                "product": {
                  "name": "microcode_ctl-2:2.1-73.24.el7_9.x86_64",
                  "product_id": "microcode_ctl-2:2.1-73.24.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@2.1-73.24.el7_9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64",
                "product": {
                  "name": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64",
                  "product_id": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl-debuginfo@2.1-73.24.el7_9?arch=x86_64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-2:2.1-73.24.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
          "product_id": "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src"
        },
        "product_reference": "microcode_ctl-2:2.1-73.24.el7_9.src",
        "relates_to_product_reference": "7Server-ELS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-2:2.1-73.24.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
          "product_id": "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64"
        },
        "product_reference": "microcode_ctl-2:2.1-73.24.el7_9.x86_64",
        "relates_to_product_reference": "7Server-ELS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
          "product_id": "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
        },
        "product_reference": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64",
        "relates_to_product_reference": "7Server-ELS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "cwe": {
        "id": "CWE-1421",
        "name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:30.376335+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
          "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
          "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:56.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:39:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10108"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2024-43420",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:09.641634+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366159"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
          "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
          "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366159",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:09.384000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:39:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10108"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2024-45332",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:16.220402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
          "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
          "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
          "url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:12.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:39:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10108"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-20012",
      "cwe": {
        "id": "CWE-696",
        "name": "Incorrect Behavior Order"
      },
      "discovery_date": "2025-05-13T22:02:43.991918+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
          "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
          "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        }
      ],
      "release_date": "2025-05-13T21:01:33.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:39:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10108"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2025-20623",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:55.575358+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
          "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
          "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:02:26.040000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:39:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10108"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-24495",
      "cwe": {
        "id": "CWE-1419",
        "name": "Incorrect Initialization of Resource"
      },
      "discovery_date": "2025-05-13T22:01:12.147444+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
          "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
          "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:51.390000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:39:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10108"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
          "product_ids": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
            "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
            "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2025-24495)\n\n* microcode_ctl: From CVEorg collector (CVE-2025-20012)\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:10101",
        "url": "https://access.redhat.com/errata/RHSA-2025:10101"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366089",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
      },
      {
        "category": "external",
        "summary": "2366114",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
      },
      {
        "category": "external",
        "summary": "2366125",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10101.json"
      }
    ],
    "title": "Red Hat Security Advisory: microcode_ctl security update",
    "tracking": {
      "current_release_date": "2025-09-25T15:11:41+00:00",
      "generator": {
        "date": "2025-09-25T15:11:41+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.8"
        }
      },
      "id": "RHSA-2025:10101",
      "initial_release_date": "2025-07-01T15:24:53+00:00",
      "revision_history": [
        {
          "date": "2025-07-01T15:24:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-07-01T15:24:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-09-25T15:11:41+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
                  "product_id": "BaseOS-9.4.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:9.4::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
                "product": {
                  "name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
                  "product_id": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20230808-2.20250512.1.el9_4?arch=src\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
                "product": {
                  "name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
                  "product_id": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20230808-2.20250512.1.el9_4?arch=noarch\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch"
        },
        "product_reference": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        },
        "product_reference": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "cwe": {
        "id": "CWE-1421",
        "name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:30.376335+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:56.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:24:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10101"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2024-43420",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:09.641634+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366159"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366159",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:09.384000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:24:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10101"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2024-45332",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:16.220402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
          "url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:12.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:24:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10101"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-20012",
      "cwe": {
        "id": "CWE-696",
        "name": "Incorrect Behavior Order"
      },
      "discovery_date": "2025-05-13T22:02:43.991918+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        }
      ],
      "release_date": "2025-05-13T21:01:33.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:24:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10101"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2025-20623",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:55.575358+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:02:26.040000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:24:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10101"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-24495",
      "cwe": {
        "id": "CWE-1419",
        "name": "Incorrect Initialization of Resource"
      },
      "discovery_date": "2025-05-13T22:01:12.147444+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:51.390000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:24:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10101"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:10126",
        "url": "https://access.redhat.com/errata/RHSA-2025:10126"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366125",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10126.json"
      }
    ],
    "title": "Red Hat Security Advisory: microcode_ctl security update",
    "tracking": {
      "current_release_date": "2025-09-25T15:11:44+00:00",
      "generator": {
        "date": "2025-09-25T15:11:44+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.8"
        }
      },
      "id": "RHSA-2025:10126",
      "initial_release_date": "2025-07-01T16:55:49+00:00",
      "revision_history": [
        {
          "date": "2025-07-01T16:55:49+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-07-01T16:55:49+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-09-25T15:11:44+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
                  "product_id": "BaseOS-8.2.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:8.2::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
                "product": {
                  "name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
                  "product_id": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20191115-4.20250512.1.el8_2?arch=src\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64",
                "product": {
                  "name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64",
                  "product_id": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20191115-4.20250512.1.el8_2?arch=x86_64\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src"
        },
        "product_reference": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
        },
        "product_reference": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "cwe": {
        "id": "CWE-1421",
        "name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:30.376335+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
          "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:56.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T16:55:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10126"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2024-43420",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:09.641634+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366159"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
          "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366159",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:09.384000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T16:55:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10126"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2024-45332",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:16.220402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
          "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
          "url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:12.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T16:55:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10126"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-20012",
      "cwe": {
        "id": "CWE-696",
        "name": "Incorrect Behavior Order"
      },
      "discovery_date": "2025-05-13T22:02:43.991918+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
          "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        }
      ],
      "release_date": "2025-05-13T21:01:33.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T16:55:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10126"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2025-20623",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:55.575358+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
          "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:02:26.040000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T16:55:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10126"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-24495",
      "cwe": {
        "id": "CWE-1419",
        "name": "Incorrect Initialization of Resource"
      },
      "discovery_date": "2025-05-13T22:01:12.147444+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
          "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:51.390000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T16:55:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10126"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
          "product_ids": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
            "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:10109",
        "url": "https://access.redhat.com/errata/RHSA-2025:10109"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366125",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10109.json"
      }
    ],
    "title": "Red Hat Security Advisory: microcode_ctl security update",
    "tracking": {
      "current_release_date": "2025-09-25T15:11:43+00:00",
      "generator": {
        "date": "2025-09-25T15:11:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.8"
        }
      },
      "id": "RHSA-2025:10109",
      "initial_release_date": "2025-07-01T18:51:54+00:00",
      "revision_history": [
        {
          "date": "2025-07-01T18:51:54+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-07-01T18:51:54+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-09-25T15:11:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
                  "product_id": "BaseOS-8.6.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:8.6::baseos"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
                  "product_id": "BaseOS-8.6.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_e4s:8.6::baseos"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
                  "product_id": "BaseOS-8.6.0.Z.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_tus:8.6::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
                "product": {
                  "name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
                  "product_id": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20220207-1.20250512.1.el8_6?arch=src\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
                "product": {
                  "name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
                  "product_id": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20220207-1.20250512.1.el8_6?arch=x86_64\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src"
        },
        "product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
        },
        "product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src"
        },
        "product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
        },
        "product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src"
        },
        "product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
        },
        "product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "cwe": {
        "id": "CWE-1421",
        "name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:30.376335+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:56.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T18:51:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10109"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2024-43420",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:09.641634+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366159"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366159",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:09.384000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T18:51:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10109"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2024-45332",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:16.220402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
          "url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:12.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T18:51:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10109"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-20012",
      "cwe": {
        "id": "CWE-696",
        "name": "Incorrect Behavior Order"
      },
      "discovery_date": "2025-05-13T22:02:43.991918+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        }
      ],
      "release_date": "2025-05-13T21:01:33.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T18:51:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10109"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2025-20623",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:55.575358+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:02:26.040000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T18:51:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10109"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-24495",
      "cwe": {
        "id": "CWE-1419",
        "name": "Incorrect Initialization of Resource"
      },
      "discovery_date": "2025-05-13T22:01:12.147444+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
          "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:51.390000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T18:51:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10109"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
            "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "ucode-intel-20250512-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the ucode-intel-20250512-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2025-15093",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15093-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2025:15093-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IDMNMRHOEJBKOC4ZPMYVNMKT2SGRVB7Q/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2025:15093-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IDMNMRHOEJBKOC4ZPMYVNMKT2SGRVB7Q/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-28956 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-28956/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-43420 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-43420/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-45332 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-45332/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-20012 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-20012/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-20054 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-20054/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-20103 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-20103/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-20623 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-20623/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-24495 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-24495/"
      }
    ],
    "title": "ucode-intel-20250512-1.1 on GA media",
    "tracking": {
      "current_release_date": "2025-05-15T00:00:00Z",
      "generator": {
        "date": "2025-05-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:15093-1",
      "initial_release_date": "2025-05-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-05-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20250512-1.1.aarch64",
                "product": {
                  "name": "ucode-intel-20250512-1.1.aarch64",
                  "product_id": "ucode-intel-20250512-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20250512-1.1.ppc64le",
                "product": {
                  "name": "ucode-intel-20250512-1.1.ppc64le",
                  "product_id": "ucode-intel-20250512-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20250512-1.1.s390x",
                "product": {
                  "name": "ucode-intel-20250512-1.1.s390x",
                  "product_id": "ucode-intel-20250512-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20250512-1.1.x86_64",
                "product": {
                  "name": "ucode-intel-20250512-1.1.x86_64",
                  "product_id": "ucode-intel-20250512-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20250512-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64"
        },
        "product_reference": "ucode-intel-20250512-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20250512-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le"
        },
        "product_reference": "ucode-intel-20250512-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20250512-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x"
        },
        "product_reference": "ucode-intel-20250512-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20250512-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        },
        "product_reference": "ucode-intel-20250512-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-28956"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-28956",
          "url": "https://www.suse.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2024-28956",
          "url": "https://bugzilla.suse.com/1242006"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-28956"
    },
    {
      "cve": "CVE-2024-43420",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-43420"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-43420",
          "url": "https://www.suse.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2024-43420",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243451 for CVE-2024-43420",
          "url": "https://bugzilla.suse.com/1243451"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-43420"
    },
    {
      "cve": "CVE-2024-45332",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-45332"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-45332",
          "url": "https://www.suse.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2024-45332",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243180 for CVE-2024-45332",
          "url": "https://bugzilla.suse.com/1243180"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-45332"
    },
    {
      "cve": "CVE-2025-20012",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-20012"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect behavior order for some Intel(R) Core(tm) Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-20012",
          "url": "https://www.suse.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2025-20012",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243123 for CVE-2025-20012",
          "url": "https://bugzilla.suse.com/1243123"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-20012"
    },
    {
      "cve": "CVE-2025-20054",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-20054"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-20054",
          "url": "https://www.suse.com/security/cve/CVE-2025-20054"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2025-20054",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243123 for CVE-2025-20054",
          "url": "https://bugzilla.suse.com/1243123"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-20054"
    },
    {
      "cve": "CVE-2025-20103",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-20103"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-20103",
          "url": "https://www.suse.com/security/cve/CVE-2025-20103"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2025-20103",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243123 for CVE-2025-20103",
          "url": "https://bugzilla.suse.com/1243123"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-20103"
    },
    {
      "cve": "CVE-2025-20623",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-20623"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core(tm) processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-20623",
          "url": "https://www.suse.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2025-20623",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243454 for CVE-2025-20623",
          "url": "https://bugzilla.suse.com/1243454"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-20623"
    },
    {
      "cve": "CVE-2025-24495",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-24495"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core(tm) Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-24495",
          "url": "https://www.suse.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2025-24495",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243123 for CVE-2025-24495",
          "url": "https://bugzilla.suse.com/1243123"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-24495"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Der Prozessor ist das zentrale Rechenwerk eines Computers.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Intel Prozessoren ausnutzen, um seine Privilegien zu erh\u00f6hen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und vertrauliche Informationen preiszugeben.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Hardware Appliance",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1030 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1030.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1030 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1030"
      },
      {
        "category": "external",
        "summary": "Intel Core Ultra Processors CNVi Advisory vom 2025-05-13",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01180.html"
      },
      {
        "category": "external",
        "summary": "2025.2 IPU, Intel Processor Advisory vom 2025-05-13",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html"
      },
      {
        "category": "external",
        "summary": "2025.2 IPU - Intel Processor Indirect Branch Predictor Advisory vom 2025-05-13",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
      },
      {
        "category": "external",
        "summary": "Intel Xeon 6 processor with E-cores SGX and TDX Advisory vom 2025-05-13",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01268.html"
      },
      {
        "category": "external",
        "summary": "Intel Xeon 6 processor E-Cores with Alias Checking Trusted Module Advisory vom 2025-05-13",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01273.html"
      },
      {
        "category": "external",
        "summary": "Intel Xeon 6 processor with E-cores Advisory vom 2025-05-13",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01278.html"
      },
      {
        "category": "external",
        "summary": "Intel Slim Bootloader Advisory vom 2025-05-13",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01290.html"
      },
      {
        "category": "external",
        "summary": "Google Cloud Platform Security Bulletin GCP-2025-025 vom 2025-05-14",
        "url": "https://cloud.google.com/support/bulletins#gcp-2025-025"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin HPESBHF04858 rev.1 vom 2025-05-13",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04858en_us\u0026docLocale=en_US"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-048 vom 2025-05-13",
        "url": "https://www.dell.com/support/kbdoc/de-de/000272449/dsa-2025-048"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-156 vom 2025-05-13",
        "url": "https://www.dell.com/support/kbdoc/de-de/000320934/dsa-2025-156-security-update-for-dell-poweredge-server-for-intel-2025-security-advisories-2025-2-ipu"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin HPESBHF04860 rev.1 vom 2025-05-13",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04860en_us\u0026docLocale=en_US"
      },
      {
        "category": "external",
        "summary": "Lenovo Security Advisory LEN-195071 vom 2025-05-14",
        "url": "https://support.lenovo.com/us/en/product_security/LEN-195071"
      },
      {
        "category": "external",
        "summary": "PoC f\u00fcr CVE-2024-45332 vom 2025-05-14",
        "url": "https://comsec.ethz.ch/research/microarch/branch-privilege-injection/"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-4170 vom 2025-05-18",
        "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:1567-1 vom 2025-05-16",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020842.html"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2025:15093-1 vom 2025-05-16",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IDMNMRHOEJBKOC4ZPMYVNMKT2SGRVB7Q/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:01650-1 vom 2025-05-22",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020877.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:01651-1 vom 2025-05-22",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/6G75W2R3WRICVZLBNWSHQ44DL3TMTL6V/"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5924 vom 2025-05-23",
        "url": "https://lists.debian.org/debian-security-announce/2025/msg00087.html"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2025-ABF317121E vom 2025-05-26",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-abf317121e"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2025-E5D3928F2C vom 2025-05-26",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-e5d3928f2c"
      },
      {
        "category": "external",
        "summary": "HP Security Bulletin HPSBHF04024 vom 2025-04-11",
        "url": "https://support.hp.com/de-de/document/ish_12559622-12559652-16/HPSBHF04024"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7535-1 vom 2025-05-27",
        "url": "https://ubuntu.com/security/notices/USN-7535-1"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:01651-2 vom 2025-05-29",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020928.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2025-2872 vom 2025-05-29",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2025-2872.html"
      },
      {
        "category": "external",
        "summary": "HP Security Bulletin HPSBHF04026 vom 2025-04-11",
        "url": "https://support.hp.com/us-en/document/ish_12568527-12568549-16/HPSBHF04026"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20410-1 vom 2025-06-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021549.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20424-1 vom 2025-06-20",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021589.html"
      },
      {
        "category": "external",
        "summary": "Lenovo Security Advisory LEN-200962 vom 2025-07-09",
        "url": "https://support.lenovo.com/us/en/product_security/LEN-200962"
      }
    ],
    "source_lang": "en-US",
    "title": "Intel Prozessoren: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-07-31T22:00:00.000+00:00",
      "generator": {
        "date": "2025-08-01T07:15:27.387+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.4.0"
        }
      },
      "id": "WID-SEC-W-2025-1030",
      "initial_release_date": "2025-05-13T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-05-13T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-05-14T22:00:00.000+00:00",
          "number": "2",
          "summary": "PoC aufgenommen"
        },
        {
          "date": "2025-05-15T22:00:00.000+00:00",
          "number": "3",
          "summary": "Referenz(en) aufgenommen: EUVD-2025-14567"
        },
        {
          "date": "2025-05-18T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Debian, SUSE und openSUSE aufgenommen"
        },
        {
          "date": "2025-05-22T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-05-25T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2025-05-26T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2025-05-27T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von HP und Ubuntu aufgenommen"
        },
        {
          "date": "2025-05-29T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von SUSE, Amazon und HP aufgenommen"
        },
        {
          "date": "2025-06-17T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-06-19T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-07-08T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von LENOVO aufgenommen"
        },
        {
          "date": "2025-07-31T22:00:00.000+00:00",
          "number": "13",
          "summary": "Referenz(en) aufgenommen:"
        }
      ],
      "status": "final",
      "version": "13"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell Computer",
            "product": {
              "name": "Dell Computer",
              "product_id": "T043182",
              "product_identification_helper": {
                "cpe": "cpe:/o:dell:dell_computer:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Dell PowerEdge",
            "product": {
              "name": "Dell PowerEdge",
              "product_id": "T019535",
              "product_identification_helper": {
                "cpe": "cpe:/h:dell:poweredge:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74185",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Google Cloud Platform",
            "product": {
              "name": "Google Cloud Platform",
              "product_id": "393401",
              "product_identification_helper": {
                "cpe": "cpe:/a:google:cloud_platform:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Google"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "HP Computer",
                "product": {
                  "name": "HP Computer",
                  "product_id": "T031288",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hp:computer:-"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "HP Computer",
                "product": {
                  "name": "HP Computer",
                  "product_id": "T032784",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hp:computer:-"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Computer"
          }
        ],
        "category": "vendor",
        "name": "HP"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HPE ProLiant",
            "product": {
              "name": "HPE ProLiant",
              "product_id": "T027705",
              "product_identification_helper": {
                "cpe": "cpe:/h:hp:proliant:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "HPE Synergy",
            "product": {
              "name": "HPE Synergy",
              "product_id": "T019820",
              "product_identification_helper": {
                "cpe": "cpe:/h:hpe:synergy:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HPE"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "CNVi",
                "product": {
                  "name": "Intel Prozessor CNVi",
                  "product_id": "T043596",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:intel:intel_prozessor:cnvi"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Xeon 6 E-cores",
                "product": {
                  "name": "Intel Prozessor Xeon 6 E-cores",
                  "product_id": "T043597",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:intel:intel_prozessor:xeon_6_e-cores"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Slim Bootloader",
                "product": {
                  "name": "Intel Prozessor Slim Bootloader",
                  "product_id": "T043598",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:intel:intel_prozessor:slim_bootloader"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Intel Prozessor",
                "product": {
                  "name": "Intel Prozessor",
                  "product_id": "T043599",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:intel:intel_prozessor:-"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Prozessor"
          }
        ],
        "category": "vendor",
        "name": "Intel"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Lenovo BIOS",
            "product": {
              "name": "Lenovo BIOS",
              "product_id": "T033443",
              "product_identification_helper": {
                "cpe": "cpe:/h:lenovo:bios:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Lenovo Computer",
            "product": {
              "name": "Lenovo Computer",
              "product_id": "T026557",
              "product_identification_helper": {
                "cpe": "cpe:/h:lenovo:computer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Lenovo"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "SUSE openSUSE",
            "product": {
              "name": "SUSE openSUSE",
              "product_id": "T027843",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:opensuse:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-20047",
      "product_status": {
        "known_affected": [
          "T031288",
          "T032784",
          "393401",
          "T033443",
          "74185",
          "T019535",
          "T043599",
          "T019820",
          "2951",
          "T002207",
          "T027705",
          "T000126",
          "T027843",
          "T043182",
          "398363",
          "T026557",
          "T043596"
        ]
      },
      "release_date": "2025-05-13T22:00:00.000+00:00",
      "title": "CVE-2025-20047"
    },
    {
      "cve": "CVE-2024-48869",
      "product_status": {
        "known_affected": [
          "T031288",
          "T032784",
          "393401",
          "T033443",
          "74185",
          "T043597",
          "T019535",
          "T043599",
          "T019820",
          "2951",
          "T002207",
          "T027705",
          "T000126",
          "T027843",
          "T043182",
          "398363",
          "T026557"
        ]
      },
      "release_date": "2025-05-13T22:00:00.000+00:00",
      "title": "CVE-2024-48869"
    },
    {
      "cve": "CVE-2025-20004",
      "product_status": {
        "known_affected": [
          "T031288",
          "T032784",
          "393401",
          "T033443",
          "74185",
          "T043597",
          "T019535",
          "T043599",
          "T019820",
          "2951",
          "T002207",
          "T027705",
          "T000126",
          "T027843",
          "T043182",
          "398363",
          "T026557"
        ]
      },
      "release_date": "2025-05-13T22:00:00.000+00:00",
      "title": "CVE-2025-20004"
    },
    {
      "cve": "CVE-2025-20100",
      "product_status": {
        "known_affected": [
          "T031288",
          "T032784",
          "393401",
          "T033443",
          "74185",
          "T043597",
          "T019535",
          "T043599",
          "T019820",
          "2951",
          "T002207",
          "T027705",
          "T000126",
          "T027843",
          "T043182",
          "398363",
          "T026557"
        ]
      },
      "release_date": "2025-05-13T22:00:00.000+00:00",
      "title": "CVE-2025-20100"
    },
    {
      "cve": "CVE-2025-20083",
      "product_status": {
        "known_affected": [
          "T031288",
          "T032784",
          "393401",
          "T033443",
          "74185",
          "T043598",
          "T019535",
          "T043599",
          "T019820",
          "2951",
          "T002207",
          "T027705",
          "T000126",
          "T027843",
          "T043182",
          "398363",
          "T026557"
        ]
      },
      "release_date": "2025-05-13T22:00:00.000+00:00",
      "title": "CVE-2025-20083"
    },
    {
      "cve": "CVE-2025-20054",
      "product_status": {
        "known_affected": [
          "T031288",
          "T032784",
          "393401",
          "T033443",
          "74185",
          "T019535",
          "T043599",
          "T019820",
          "2951",
          "T002207",
          "T027705",
          "T000126",
          "T027843",
          "T043182",
          "398363",
          "T026557"
        ]
      },
      "release_date": "2025-05-13T22:00:00.000+00:00",
      "title": "CVE-2025-20054"
    },
    {
      "cve": "CVE-2025-20103",
      "product_status": {
        "known_affected": [
          "T031288",
          "T032784",
          "393401",
          "T033443",
          "74185",
          "T019535",
          "T043599",
          "T019820",
          "2951",
          "T002207",
          "T027705",
          "T000126",
          "T027843",
          "T043182",
          "398363",
          "T026557"
        ]
      },
      "release_date": "2025-05-13T22:00:00.000+00:00",
      "title": "CVE-2025-20103"
    },
    {
      "cve": "CVE-2024-43420",
      "product_status": {
        "known_affected": [
          "T031288",
          "T032784",
          "393401",
          "T033443",
          "74185",
          "T019535",
          "T043599",
          "T019820",
          "2951",
          "T002207",
          "T027705",
          "T000126",
          "T027843",
          "T043182",
          "398363",
          "T026557"
        ]
      },
      "release_date": "2025-05-13T22:00:00.000+00:00",
      "title": "CVE-2024-43420"
    },
    {
      "cve": "CVE-2024-45332",
      "product_status": {
        "known_affected": [
          "T031288",
          "T032784",
          "393401",
          "T033443",
          "74185",
          "T019535",
          "T043599",
          "T019820",
          "2951",
          "T002207",
          "T027705",
          "T000126",
          "T027843",
          "T043182",
          "398363",
          "T026557"
        ]
      },
      "release_date": "2025-05-13T22:00:00.000+00:00",
      "title": "CVE-2024-45332"
    },
    {
      "cve": "CVE-2025-20623",
      "product_status": {
        "known_affected": [
          "T031288",
          "T032784",
          "393401",
          "T033443",
          "74185",
          "T019535",
          "T043599",
          "T019820",
          "2951",
          "T002207",
          "T027705",
          "T000126",
          "T027843",
          "T043182",
          "398363",
          "T026557"
        ]
      },
      "release_date": "2025-05-13T22:00:00.000+00:00",
      "title": "CVE-2025-20623"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "IBM QRadar Security Information and Event Management (SIEM) bietet Unterst\u00fctzung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM Komponenten ausnutzen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuf\u00fchren, um beliebigen Programmcode auszuf\u00fchren, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1905 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1905.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1905 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1905"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7243011 vom 2025-08-25",
        "url": "https://www.ibm.com/support/pages/node/7243011"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:14746 vom 2025-08-27",
        "url": "https://access.redhat.com/errata/RHSA-2025:14746"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:14748 vom 2025-08-27",
        "url": "https://access.redhat.com/errata/RHSA-2025:14748"
      }
    ],
    "source_lang": "en-US",
    "title": "IBM QRadar SIEM Komponente: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-08-27T22:00:00.000+00:00",
      "generator": {
        "date": "2025-08-28T05:52:03.530+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.4.0"
        }
      },
      "id": "WID-SEC-W-2025-1905",
      "initial_release_date": "2025-08-25T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-08-25T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-08-27T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Red Hat aufgenommen"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.5.0 UP13 IF01",
                "product": {
                  "name": "IBM QRadar SIEM \u003c7.5.0 UP13 IF01",
                  "product_id": "T046492"
                }
              },
              {
                "category": "product_version",
                "name": "7.5.0 UP13 IF01",
                "product": {
                  "name": "IBM QRadar SIEM 7.5.0 UP13 IF01",
                  "product_id": "T046492-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up13_if01"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-17543",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2019-17543"
    },
    {
      "cve": "CVE-2019-5427",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2019-5427"
    },
    {
      "cve": "CVE-2020-5260",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2020-5260"
    },
    {
      "cve": "CVE-2022-49058",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-49058"
    },
    {
      "cve": "CVE-2022-49111",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-49111"
    },
    {
      "cve": "CVE-2022-49136",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-49136"
    },
    {
      "cve": "CVE-2022-49788",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-49788"
    },
    {
      "cve": "CVE-2022-49846",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-49846"
    },
    {
      "cve": "CVE-2022-49977",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-49977"
    },
    {
      "cve": "CVE-2022-50020",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-50020"
    },
    {
      "cve": "CVE-2024-23337",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-23337"
    },
    {
      "cve": "CVE-2024-28956",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-28956"
    },
    {
      "cve": "CVE-2024-34397",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-34397"
    },
    {
      "cve": "CVE-2024-43420",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-43420"
    },
    {
      "cve": "CVE-2024-45332",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-45332"
    },
    {
      "cve": "CVE-2024-50154",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-50154"
    },
    {
      "cve": "CVE-2024-50349",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-50349"
    },
    {
      "cve": "CVE-2024-52006",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-52006"
    },
    {
      "cve": "CVE-2024-52533",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-52533"
    },
    {
      "cve": "CVE-2024-53920",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-53920"
    },
    {
      "cve": "CVE-2024-54661",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-54661"
    },
    {
      "cve": "CVE-2024-57980",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-57980"
    },
    {
      "cve": "CVE-2024-58002",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-58002"
    },
    {
      "cve": "CVE-2024-6531",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-6531"
    },
    {
      "cve": "CVE-2025-20012",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-20012"
    },
    {
      "cve": "CVE-2025-20623",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-20623"
    },
    {
      "cve": "CVE-2025-21905",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-21905"
    },
    {
      "cve": "CVE-2025-21919",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-21919"
    },
    {
      "cve": "CVE-2025-21928",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-21928"
    },
    {
      "cve": "CVE-2025-21991",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-21991"
    },
    {
      "cve": "CVE-2025-22004",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-22004"
    },
    {
      "cve": "CVE-2025-22020",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-22020"
    },
    {
      "cve": "CVE-2025-23150",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-23150"
    },
    {
      "cve": "CVE-2025-24495",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-24495"
    },
    {
      "cve": "CVE-2025-27613",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-27613"
    },
    {
      "cve": "CVE-2025-27614",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-27614"
    },
    {
      "cve": "CVE-2025-32415",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-32415"
    },
    {
      "cve": "CVE-2025-37738",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-37738"
    },
    {
      "cve": "CVE-2025-37890",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-37890"
    },
    {
      "cve": "CVE-2025-38052",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-38052"
    },
    {
      "cve": "CVE-2025-38079",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-38079"
    },
    {
      "cve": "CVE-2025-38086",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-38086"
    },
    {
      "cve": "CVE-2025-4373",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-4373"
    },
    {
      "cve": "CVE-2025-46835",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-46835"
    },
    {
      "cve": "CVE-2025-47273",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-47273"
    },
    {
      "cve": "CVE-2025-48060",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-48060"
    },
    {
      "cve": "CVE-2025-48384",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-48384"
    },
    {
      "cve": "CVE-2025-48385",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-48385"
    },
    {
      "cve": "CVE-2025-49794",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-49794"
    },
    {
      "cve": "CVE-2025-49796",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-49796"
    },
    {
      "cve": "CVE-2025-52434",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-52434"
    },
    {
      "cve": "CVE-2025-52520",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-52520"
    },
    {
      "cve": "CVE-2025-53506",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-53506"
    },
    {
      "cve": "CVE-2025-55668",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-55668"
    },
    {
      "cve": "CVE-2025-6021",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-6021"
    },
    {
      "cve": "CVE-2025-6965",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-6965"
    },
    {
      "cve": "CVE-2025-7425",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-7425"
    }
  ]
}

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access."
    },
    {
      "lang": "es",
      "value": "La exposici\u00f3n de informaci\u00f3n confidencial causada por un estado predictor de microarquitectura compartido que influye en la ejecuci\u00f3n transitoria de algunos procesadores Intel Atom\u00ae puede permitir que un usuario autenticado habilite potencialmente la divulgaci\u00f3n de informaci\u00f3n a trav\u00e9s del acceso local."
    }
  ],
  "id": "CVE-2024-43420",
  "lastModified": "2025-05-16T14:43:56.797",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.6,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.1,
        "impactScore": 4.0,
        "source": "secure@intel.com",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "HIGH",
          "attackRequirements": "PRESENT",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 5.7,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "secure@intel.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-05-13T21:16:01.103",
  "references": [
    {
      "source": "secure@intel.com",
      "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Awaiting Analysis"
}

{
  "affected": [],
  "aliases": [
    "CVE-2024-43420"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-05-13T21:16:01Z",
    "severity": "MODERATE"
  },
  "details": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
  "id": "GHSA-6gp3-r6r7-wq4f",
  "modified": "2025-05-13T21:30:54Z",
  "published": "2025-05-13T21:30:54Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
    },
    {
      "type": "WEB",
      "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}