Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-43420 (GCVE-0-2024-43420)
Vulnerability from cvelistv5
Published
2025-05-13 21:03
Modified
2025-05-14 14:01
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Information Disclosure
- CWE-1423 - Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution
Summary
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| n/a | Intel Atom(R) processors |
Version: See references |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-43420",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-05-14T13:59:10.424631Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-05-14T14:01:31.886Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Intel Atom(R) processors",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "See references"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"cvssV4_0": {
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Information Disclosure",
"lang": "en"
},
{
"cweId": "CWE-1423",
"description": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-13T21:03:09.384Z",
"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
"shortName": "intel"
},
"references": [
{
"name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
"assignerShortName": "intel",
"cveId": "CVE-2024-43420",
"datePublished": "2025-05-13T21:03:09.384Z",
"dateReserved": "2024-09-19T03:00:23.071Z",
"dateUpdated": "2025-05-14T14:01:31.886Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2024-43420\",\"sourceIdentifier\":\"secure@intel.com\",\"published\":\"2025-05-13T21:16:01.103\",\"lastModified\":\"2025-05-16T14:43:56.797\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.\"},{\"lang\":\"es\",\"value\":\"La exposici\u00f3n de informaci\u00f3n confidencial causada por un estado predictor de microarquitectura compartido que influye en la ejecuci\u00f3n transitoria de algunos procesadores Intel Atom\u00ae puede permitir que un usuario autenticado habilite potencialmente la divulgaci\u00f3n de informaci\u00f3n a trav\u00e9s del acceso local.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"secure@intel.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":5.7,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"attackRequirements\":\"PRESENT\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"secure@intel.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N\",\"baseScore\":5.6,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.1,\"impactScore\":4.0}]},\"references\":[{\"url\":\"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html\",\"source\":\"secure@intel.com\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-43420\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-05-14T13:59:10.424631Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-14T14:00:01.719Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 5.6, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}, \"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 5.7, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"attackRequirements\": \"PRESENT\", \"privilegesRequired\": \"LOW\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"NONE\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"n/a\", \"product\": \"Intel Atom(R) processors\", \"versions\": [{\"status\": \"affected\", \"version\": \"See references\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html\", \"name\": \"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"Information Disclosure\"}, {\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1423\", \"description\": \"Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution\"}]}], \"providerMetadata\": {\"orgId\": \"6dda929c-bb53-4a77-a76d-48e79601a1ce\", \"shortName\": \"intel\", \"dateUpdated\": \"2025-05-13T21:03:09.384Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-43420\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-14T14:01:31.886Z\", \"dateReserved\": \"2024-09-19T03:00:23.071Z\", \"assignerOrgId\": \"6dda929c-bb53-4a77-a76d-48e79601a1ce\", \"datePublished\": \"2025-05-13T21:03:09.384Z\", \"assignerShortName\": \"intel\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
rhsa-2025:10991
Vulnerability from csaf_redhat
Published
2025-07-14 18:06
Modified
2025-08-30 23:31
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10991",
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10991.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-08-30T23:31:24+00:00",
"generator": {
"date": "2025-08-30T23:31:24+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2025:10991",
"initial_release_date": "2025-07-14T18:06:22+00:00",
"revision_history": [
{
"date": "2025-07-14T18:06:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-14T18:06:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-30T23:31:24+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20250512-1.el8_10.src",
"product": {
"name": "microcode_ctl-4:20250512-1.el8_10.src",
"product_id": "microcode_ctl-4:20250512-1.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20250512-1.el8_10?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20250512-1.el8_10.x86_64",
"product": {
"name": "microcode_ctl-4:20250512-1.el8_10.x86_64",
"product_id": "microcode_ctl-4:20250512-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20250512-1.el8_10?arch=x86_64\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20250512-1.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src"
},
"product_reference": "microcode_ctl-4:20250512-1.el8_10.src",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20250512-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
},
"product_reference": "microcode_ctl-4:20250512-1.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-14T18:06:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-14T18:06:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-14T18:06:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-14T18:06:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-14T18:06:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-14T18:06:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10102
Vulnerability from csaf_redhat
Published
2025-07-01 14:55
Modified
2025-08-30 23:29
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2025-24495)
* microcode_ctl: From CVEorg collector (CVE-2025-20012)
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2025-24495)\n\n* microcode_ctl: From CVEorg collector (CVE-2025-20012)\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10102",
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10102.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-08-30T23:29:50+00:00",
"generator": {
"date": "2025-08-30T23:29:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2025:10102",
"initial_release_date": "2025-07-01T14:55:04+00:00",
"revision_history": [
{
"date": "2025-07-01T14:55:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T14:55:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-30T23:29:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:9.2::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src",
"product": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src",
"product_id": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220809-2.20250512.1.el9_2?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"product": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"product_id": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220809-2.20250512.1.el9_2?arch=noarch\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch"
},
"product_reference": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
},
"product_reference": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:55:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:55:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:55:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:55:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:55:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:55:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhba-2025:9433
Vulnerability from csaf_redhat
Published
2025-06-24 02:16
Modified
2025-08-30 23:31
Summary
Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Bug Fix(es) and Enhancement(s):
* Update microcode_ctl to latest upstream [rhel-9.6.z] (JIRA:RHEL-96929)
* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91226)
* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91233)
* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91241)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nBug Fix(es) and Enhancement(s):\n\n* Update microcode_ctl to latest upstream [rhel-9.6.z] (JIRA:RHEL-96929)\n\n* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91226)\n\n* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91233)\n\n* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91241)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2025:9433",
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
},
{
"category": "external",
"summary": "RHEL-96929",
"url": "https://issues.redhat.com/browse/RHEL-96929"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_9433.json"
}
],
"title": "Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update",
"tracking": {
"current_release_date": "2025-08-30T23:31:14+00:00",
"generator": {
"date": "2025-08-30T23:31:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHBA-2025:9433",
"initial_release_date": "2025-06-24T02:16:25+00:00",
"revision_history": [
{
"date": "2025-06-24T02:16:25+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-06-24T02:16:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-30T23:31:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
"product": {
"name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
"product_id": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20250211-1.20250512.1.el9_6?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"product": {
"name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"product_id": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20250211-1.20250512.1.el9_6?arch=noarch\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch"
},
"product_reference": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
},
"product_reference": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-24T02:16:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-24T02:16:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-24T02:16:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-24T02:16:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-24T02:16:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-24T02:16:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10103
Vulnerability from csaf_redhat
Published
2025-07-01 14:44
Modified
2025-08-30 23:30
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2025-24495)
* microcode_ctl: From CVEorg collector (CVE-2025-20012)
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2025-24495)\n\n* microcode_ctl: From CVEorg collector (CVE-2025-20012)\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10103",
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10103.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-08-30T23:30:01+00:00",
"generator": {
"date": "2025-08-30T23:30:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2025:10103",
"initial_release_date": "2025-07-01T14:44:03+00:00",
"revision_history": [
{
"date": "2025-07-01T14:44:03+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T14:44:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-30T23:30:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
"product_id": "BaseOS-9.0.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:9.0::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src",
"product": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src",
"product_id": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220207-1.20250512.1.el9_0?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"product": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"product_id": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220207-1.20250512.1.el9_0?arch=noarch\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
"product_id": "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
"product_id": "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src",
"relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:44:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:44:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:44:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:44:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:44:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:44:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10107
Vulnerability from csaf_redhat
Published
2025-07-01 15:33
Modified
2025-08-30 23:30
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10107",
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10107.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-08-30T23:30:34+00:00",
"generator": {
"date": "2025-08-30T23:30:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2025:10107",
"initial_release_date": "2025-07-01T15:33:58+00:00",
"revision_history": [
{
"date": "2025-07-01T15:33:58+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T15:33:58+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-30T23:30:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.4::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"product": {
"name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"product_id": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20210216-1.20250512.1.el8_4?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64",
"product": {
"name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64",
"product_id": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20210216-1.20250512.1.el8_4?arch=x86_64\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src"
},
"product_reference": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
},
"product_reference": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:33:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:33:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:33:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:33:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:33:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:33:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10111
Vulnerability from csaf_redhat
Published
2025-07-01 15:49
Modified
2025-08-30 23:30
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10111",
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10111.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-08-30T23:30:54+00:00",
"generator": {
"date": "2025-08-30T23:30:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2025:10111",
"initial_release_date": "2025-07-01T15:49:13+00:00",
"revision_history": [
{
"date": "2025-07-01T15:49:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T15:49:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-30T23:30:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product": {
"name": "Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:7.7::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-53.26.el7_7.1.src",
"product": {
"name": "microcode_ctl-2:2.1-53.26.el7_7.1.src",
"product_id": "microcode_ctl-2:2.1-53.26.el7_7.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-53.26.el7_7.1?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"product": {
"name": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"product_id": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-53.26.el7_7.1?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64",
"product": {
"name": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64",
"product_id": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl-debuginfo@2.1-53.26.el7_7.1?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-53.26.el7_7.1.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src"
},
"product_reference": "microcode_ctl-2:2.1-53.26.el7_7.1.src",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64"
},
"product_reference": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:49:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:49:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:49:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:49:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:49:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:49:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10162
Vulnerability from csaf_redhat
Published
2025-07-01 19:48
Modified
2025-08-30 23:30
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10162",
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10162.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-08-30T23:30:12+00:00",
"generator": {
"date": "2025-08-30T23:30:12+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2025:10162",
"initial_release_date": "2025-07-01T19:48:14+00:00",
"revision_history": [
{
"date": "2025-07-01T19:48:14+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T19:48:14+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-30T23:30:12+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:8.8::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_tus:8.8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"product": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"product_id": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220809-2.20250512.1.el8_8?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"product": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"product_id": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220809-2.20250512.1.el8_8?arch=x86_64\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src"
},
"product_reference": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
},
"product_reference": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src"
},
"product_reference": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
},
"product_reference": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T19:48:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T19:48:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T19:48:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T19:48:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T19:48:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T19:48:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10108
Vulnerability from csaf_redhat
Published
2025-07-01 15:39
Modified
2025-08-30 23:30
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10108",
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10108.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-08-30T23:30:44+00:00",
"generator": {
"date": "2025-08-30T23:30:44+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2025:10108",
"initial_release_date": "2025-07-01T15:39:18+00:00",
"revision_history": [
{
"date": "2025-07-01T15:39:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T15:39:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-30T23:30:44+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-73.24.el7_9.src",
"product": {
"name": "microcode_ctl-2:2.1-73.24.el7_9.src",
"product_id": "microcode_ctl-2:2.1-73.24.el7_9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-73.24.el7_9?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"product": {
"name": "microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"product_id": "microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-73.24.el7_9?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64",
"product": {
"name": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64",
"product_id": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl-debuginfo@2.1-73.24.el7_9?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-73.24.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src"
},
"product_reference": "microcode_ctl-2:2.1-73.24.el7_9.src",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-73.24.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64"
},
"product_reference": "microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64",
"relates_to_product_reference": "7Server-ELS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:39:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:39:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:39:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:39:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:39:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:39:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10101
Vulnerability from csaf_redhat
Published
2025-07-01 15:24
Modified
2025-08-30 23:29
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2025-24495)
* microcode_ctl: From CVEorg collector (CVE-2025-20012)
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2025-24495)\n\n* microcode_ctl: From CVEorg collector (CVE-2025-20012)\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10101",
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10101.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-08-30T23:29:39+00:00",
"generator": {
"date": "2025-08-30T23:29:39+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2025:10101",
"initial_release_date": "2025-07-01T15:24:53+00:00",
"revision_history": [
{
"date": "2025-07-01T15:24:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T15:24:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-30T23:29:39+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:9.4::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
"product": {
"name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
"product_id": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20230808-2.20250512.1.el9_4?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"product": {
"name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"product_id": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20230808-2.20250512.1.el9_4?arch=noarch\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch"
},
"product_reference": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
},
"product_reference": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:24:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:24:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:24:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:24:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:24:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:24:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10126
Vulnerability from csaf_redhat
Published
2025-07-01 16:55
Modified
2025-08-30 23:31
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10126",
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10126.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-08-30T23:31:04+00:00",
"generator": {
"date": "2025-08-30T23:31:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2025:10126",
"initial_release_date": "2025-07-01T16:55:49+00:00",
"revision_history": [
{
"date": "2025-07-01T16:55:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T16:55:49+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-30T23:31:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.2::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"product": {
"name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"product_id": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20191115-4.20250512.1.el8_2?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64",
"product": {
"name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64",
"product_id": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20191115-4.20250512.1.el8_2?arch=x86_64\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src"
},
"product_reference": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
},
"product_reference": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T16:55:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T16:55:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T16:55:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T16:55:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T16:55:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T16:55:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10109
Vulnerability from csaf_redhat
Published
2025-07-01 18:51
Modified
2025-08-30 23:30
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10109",
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10109.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-08-30T23:30:23+00:00",
"generator": {
"date": "2025-08-30T23:30:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2025:10109",
"initial_release_date": "2025-07-01T18:51:54+00:00",
"revision_history": [
{
"date": "2025-07-01T18:51:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T18:51:54+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-30T23:30:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.6::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:8.6::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_tus:8.6::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"product": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"product_id": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220207-1.20250512.1.el8_6?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"product": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"product_id": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220207-1.20250512.1.el8_6?arch=x86_64\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T18:51:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T18:51:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T18:51:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T18:51:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T18:51:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T18:51:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
wid-sec-w-2025-1030
Vulnerability from csaf_certbund
Published
2025-05-13 22:00
Modified
2025-07-31 22:00
Summary
Intel Prozessoren: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Der Prozessor ist das zentrale Rechenwerk eines Computers.
Angriff
Ein Angreifer kann mehrere Schwachstellen in Intel Prozessoren ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand herbeizuführen und vertrauliche Informationen preiszugeben.
Betroffene Betriebssysteme
- Hardware Appliance
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Der Prozessor ist das zentrale Rechenwerk eines Computers.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Intel Prozessoren ausnutzen, um seine Privilegien zu erh\u00f6hen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und vertrauliche Informationen preiszugeben.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Hardware Appliance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-1030 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1030.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-1030 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1030"
},
{
"category": "external",
"summary": "Intel Core Ultra Processors CNVi Advisory vom 2025-05-13",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01180.html"
},
{
"category": "external",
"summary": "2025.2 IPU, Intel Processor Advisory vom 2025-05-13",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html"
},
{
"category": "external",
"summary": "2025.2 IPU - Intel Processor Indirect Branch Predictor Advisory vom 2025-05-13",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
},
{
"category": "external",
"summary": "Intel Xeon 6 processor with E-cores SGX and TDX Advisory vom 2025-05-13",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01268.html"
},
{
"category": "external",
"summary": "Intel Xeon 6 processor E-Cores with Alias Checking Trusted Module Advisory vom 2025-05-13",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01273.html"
},
{
"category": "external",
"summary": "Intel Xeon 6 processor with E-cores Advisory vom 2025-05-13",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01278.html"
},
{
"category": "external",
"summary": "Intel Slim Bootloader Advisory vom 2025-05-13",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01290.html"
},
{
"category": "external",
"summary": "Google Cloud Platform Security Bulletin GCP-2025-025 vom 2025-05-14",
"url": "https://cloud.google.com/support/bulletins#gcp-2025-025"
},
{
"category": "external",
"summary": "HPE Security Bulletin HPESBHF04858 rev.1 vom 2025-05-13",
"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04858en_us\u0026docLocale=en_US"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2025-048 vom 2025-05-13",
"url": "https://www.dell.com/support/kbdoc/de-de/000272449/dsa-2025-048"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2025-156 vom 2025-05-13",
"url": "https://www.dell.com/support/kbdoc/de-de/000320934/dsa-2025-156-security-update-for-dell-poweredge-server-for-intel-2025-security-advisories-2025-2-ipu"
},
{
"category": "external",
"summary": "HPE Security Bulletin HPESBHF04860 rev.1 vom 2025-05-13",
"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04860en_us\u0026docLocale=en_US"
},
{
"category": "external",
"summary": "Lenovo Security Advisory LEN-195071 vom 2025-05-14",
"url": "https://support.lenovo.com/us/en/product_security/LEN-195071"
},
{
"category": "external",
"summary": "PoC f\u00fcr CVE-2024-45332 vom 2025-05-14",
"url": "https://comsec.ethz.ch/research/microarch/branch-privilege-injection/"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-4170 vom 2025-05-18",
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:1567-1 vom 2025-05-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020842.html"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2025:15093-1 vom 2025-05-16",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IDMNMRHOEJBKOC4ZPMYVNMKT2SGRVB7Q/"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01650-1 vom 2025-05-22",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020877.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01651-1 vom 2025-05-22",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/6G75W2R3WRICVZLBNWSHQ44DL3TMTL6V/"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5924 vom 2025-05-23",
"url": "https://lists.debian.org/debian-security-announce/2025/msg00087.html"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2025-ABF317121E vom 2025-05-26",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-abf317121e"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2025-E5D3928F2C vom 2025-05-26",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-e5d3928f2c"
},
{
"category": "external",
"summary": "HP Security Bulletin HPSBHF04024 vom 2025-04-11",
"url": "https://support.hp.com/de-de/document/ish_12559622-12559652-16/HPSBHF04024"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7535-1 vom 2025-05-27",
"url": "https://ubuntu.com/security/notices/USN-7535-1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01651-2 vom 2025-05-29",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020928.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2025-2872 vom 2025-05-29",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2025-2872.html"
},
{
"category": "external",
"summary": "HP Security Bulletin HPSBHF04026 vom 2025-04-11",
"url": "https://support.hp.com/us-en/document/ish_12568527-12568549-16/HPSBHF04026"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20410-1 vom 2025-06-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021549.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20424-1 vom 2025-06-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021589.html"
},
{
"category": "external",
"summary": "Lenovo Security Advisory LEN-200962 vom 2025-07-09",
"url": "https://support.lenovo.com/us/en/product_security/LEN-200962"
}
],
"source_lang": "en-US",
"title": "Intel Prozessoren: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-07-31T22:00:00.000+00:00",
"generator": {
"date": "2025-08-01T07:15:27.387+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.4.0"
}
},
"id": "WID-SEC-W-2025-1030",
"initial_release_date": "2025-05-13T22:00:00.000+00:00",
"revision_history": [
{
"date": "2025-05-13T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2025-05-14T22:00:00.000+00:00",
"number": "2",
"summary": "PoC aufgenommen"
},
{
"date": "2025-05-15T22:00:00.000+00:00",
"number": "3",
"summary": "Referenz(en) aufgenommen: EUVD-2025-14567"
},
{
"date": "2025-05-18T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Debian, SUSE und openSUSE aufgenommen"
},
{
"date": "2025-05-22T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-05-25T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2025-05-26T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Fedora aufgenommen"
},
{
"date": "2025-05-27T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von HP und Ubuntu aufgenommen"
},
{
"date": "2025-05-29T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von SUSE, Amazon und HP aufgenommen"
},
{
"date": "2025-06-17T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-19T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-07-08T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von LENOVO aufgenommen"
},
{
"date": "2025-07-31T22:00:00.000+00:00",
"number": "13",
"summary": "Referenz(en) aufgenommen:"
}
],
"status": "final",
"version": "13"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "Dell Computer",
"product": {
"name": "Dell Computer",
"product_id": "T043182",
"product_identification_helper": {
"cpe": "cpe:/o:dell:dell_computer:-"
}
}
},
{
"category": "product_name",
"name": "Dell PowerEdge",
"product": {
"name": "Dell PowerEdge",
"product_id": "T019535",
"product_identification_helper": {
"cpe": "cpe:/h:dell:poweredge:-"
}
}
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "Fedora Linux",
"product": {
"name": "Fedora Linux",
"product_id": "74185",
"product_identification_helper": {
"cpe": "cpe:/o:fedoraproject:fedora:-"
}
}
}
],
"category": "vendor",
"name": "Fedora"
},
{
"branches": [
{
"category": "product_name",
"name": "Google Cloud Platform",
"product": {
"name": "Google Cloud Platform",
"product_id": "393401",
"product_identification_helper": {
"cpe": "cpe:/a:google:cloud_platform:-"
}
}
}
],
"category": "vendor",
"name": "Google"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "HP Computer",
"product": {
"name": "HP Computer",
"product_id": "T031288",
"product_identification_helper": {
"cpe": "cpe:/h:hp:computer:-"
}
}
},
{
"category": "product_name",
"name": "HP Computer",
"product": {
"name": "HP Computer",
"product_id": "T032784",
"product_identification_helper": {
"cpe": "cpe:/h:hp:computer:-"
}
}
}
],
"category": "product_name",
"name": "Computer"
}
],
"category": "vendor",
"name": "HP"
},
{
"branches": [
{
"category": "product_name",
"name": "HPE ProLiant",
"product": {
"name": "HPE ProLiant",
"product_id": "T027705",
"product_identification_helper": {
"cpe": "cpe:/h:hp:proliant:-"
}
}
},
{
"category": "product_name",
"name": "HPE Synergy",
"product": {
"name": "HPE Synergy",
"product_id": "T019820",
"product_identification_helper": {
"cpe": "cpe:/h:hpe:synergy:-"
}
}
}
],
"category": "vendor",
"name": "HPE"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "CNVi",
"product": {
"name": "Intel Prozessor CNVi",
"product_id": "T043596",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:cnvi"
}
}
},
{
"category": "product_version",
"name": "Xeon 6 E-cores",
"product": {
"name": "Intel Prozessor Xeon 6 E-cores",
"product_id": "T043597",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:xeon_6_e-cores"
}
}
},
{
"category": "product_version",
"name": "Slim Bootloader",
"product": {
"name": "Intel Prozessor Slim Bootloader",
"product_id": "T043598",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:slim_bootloader"
}
}
},
{
"category": "product_name",
"name": "Intel Prozessor",
"product": {
"name": "Intel Prozessor",
"product_id": "T043599",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:-"
}
}
}
],
"category": "product_name",
"name": "Prozessor"
}
],
"category": "vendor",
"name": "Intel"
},
{
"branches": [
{
"category": "product_name",
"name": "Lenovo BIOS",
"product": {
"name": "Lenovo BIOS",
"product_id": "T033443",
"product_identification_helper": {
"cpe": "cpe:/h:lenovo:bios:-"
}
}
},
{
"category": "product_name",
"name": "Lenovo Computer",
"product": {
"name": "Lenovo Computer",
"product_id": "T026557",
"product_identification_helper": {
"cpe": "cpe:/h:lenovo:computer:-"
}
}
}
],
"category": "vendor",
"name": "Lenovo"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
},
{
"category": "product_name",
"name": "SUSE openSUSE",
"product": {
"name": "SUSE openSUSE",
"product_id": "T027843",
"product_identification_helper": {
"cpe": "cpe:/o:suse:opensuse:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-20047",
"product_status": {
"known_affected": [
"T031288",
"T032784",
"393401",
"T033443",
"74185",
"T019535",
"T043599",
"T019820",
"2951",
"T002207",
"T027705",
"T000126",
"T027843",
"T043182",
"398363",
"T026557",
"T043596"
]
},
"release_date": "2025-05-13T22:00:00.000+00:00",
"title": "CVE-2025-20047"
},
{
"cve": "CVE-2024-48869",
"product_status": {
"known_affected": [
"T031288",
"T032784",
"393401",
"T033443",
"74185",
"T043597",
"T019535",
"T043599",
"T019820",
"2951",
"T002207",
"T027705",
"T000126",
"T027843",
"T043182",
"398363",
"T026557"
]
},
"release_date": "2025-05-13T22:00:00.000+00:00",
"title": "CVE-2024-48869"
},
{
"cve": "CVE-2025-20004",
"product_status": {
"known_affected": [
"T031288",
"T032784",
"393401",
"T033443",
"74185",
"T043597",
"T019535",
"T043599",
"T019820",
"2951",
"T002207",
"T027705",
"T000126",
"T027843",
"T043182",
"398363",
"T026557"
]
},
"release_date": "2025-05-13T22:00:00.000+00:00",
"title": "CVE-2025-20004"
},
{
"cve": "CVE-2025-20100",
"product_status": {
"known_affected": [
"T031288",
"T032784",
"393401",
"T033443",
"74185",
"T043597",
"T019535",
"T043599",
"T019820",
"2951",
"T002207",
"T027705",
"T000126",
"T027843",
"T043182",
"398363",
"T026557"
]
},
"release_date": "2025-05-13T22:00:00.000+00:00",
"title": "CVE-2025-20100"
},
{
"cve": "CVE-2025-20083",
"product_status": {
"known_affected": [
"T031288",
"T032784",
"393401",
"T033443",
"74185",
"T043598",
"T019535",
"T043599",
"T019820",
"2951",
"T002207",
"T027705",
"T000126",
"T027843",
"T043182",
"398363",
"T026557"
]
},
"release_date": "2025-05-13T22:00:00.000+00:00",
"title": "CVE-2025-20083"
},
{
"cve": "CVE-2025-20054",
"product_status": {
"known_affected": [
"T031288",
"T032784",
"393401",
"T033443",
"74185",
"T019535",
"T043599",
"T019820",
"2951",
"T002207",
"T027705",
"T000126",
"T027843",
"T043182",
"398363",
"T026557"
]
},
"release_date": "2025-05-13T22:00:00.000+00:00",
"title": "CVE-2025-20054"
},
{
"cve": "CVE-2025-20103",
"product_status": {
"known_affected": [
"T031288",
"T032784",
"393401",
"T033443",
"74185",
"T019535",
"T043599",
"T019820",
"2951",
"T002207",
"T027705",
"T000126",
"T027843",
"T043182",
"398363",
"T026557"
]
},
"release_date": "2025-05-13T22:00:00.000+00:00",
"title": "CVE-2025-20103"
},
{
"cve": "CVE-2024-43420",
"product_status": {
"known_affected": [
"T031288",
"T032784",
"393401",
"T033443",
"74185",
"T019535",
"T043599",
"T019820",
"2951",
"T002207",
"T027705",
"T000126",
"T027843",
"T043182",
"398363",
"T026557"
]
},
"release_date": "2025-05-13T22:00:00.000+00:00",
"title": "CVE-2024-43420"
},
{
"cve": "CVE-2024-45332",
"product_status": {
"known_affected": [
"T031288",
"T032784",
"393401",
"T033443",
"74185",
"T019535",
"T043599",
"T019820",
"2951",
"T002207",
"T027705",
"T000126",
"T027843",
"T043182",
"398363",
"T026557"
]
},
"release_date": "2025-05-13T22:00:00.000+00:00",
"title": "CVE-2024-45332"
},
{
"cve": "CVE-2025-20623",
"product_status": {
"known_affected": [
"T031288",
"T032784",
"393401",
"T033443",
"74185",
"T019535",
"T043599",
"T019820",
"2951",
"T002207",
"T027705",
"T000126",
"T027843",
"T043182",
"398363",
"T026557"
]
},
"release_date": "2025-05-13T22:00:00.000+00:00",
"title": "CVE-2025-20623"
}
]
}
wid-sec-w-2025-1905
Vulnerability from csaf_certbund
Published
2025-08-25 22:00
Modified
2025-08-27 22:00
Summary
IBM QRadar SIEM Komponente: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
IBM QRadar Security Information and Event Management (SIEM) bietet Unterstützung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.
Angriff
Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM Komponenten ausnutzen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.
Betroffene Betriebssysteme
- Linux
- UNIX
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "IBM QRadar Security Information and Event Management (SIEM) bietet Unterst\u00fctzung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM Komponenten ausnutzen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuf\u00fchren, um beliebigen Programmcode auszuf\u00fchren, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-1905 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1905.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-1905 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1905"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7243011 vom 2025-08-25",
"url": "https://www.ibm.com/support/pages/node/7243011"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:14746 vom 2025-08-27",
"url": "https://access.redhat.com/errata/RHSA-2025:14746"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:14748 vom 2025-08-27",
"url": "https://access.redhat.com/errata/RHSA-2025:14748"
}
],
"source_lang": "en-US",
"title": "IBM QRadar SIEM Komponente: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-08-27T22:00:00.000+00:00",
"generator": {
"date": "2025-08-28T05:52:03.530+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.4.0"
}
},
"id": "WID-SEC-W-2025-1905",
"initial_release_date": "2025-08-25T22:00:00.000+00:00",
"revision_history": [
{
"date": "2025-08-25T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2025-08-27T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c7.5.0 UP13 IF01",
"product": {
"name": "IBM QRadar SIEM \u003c7.5.0 UP13 IF01",
"product_id": "T046492"
}
},
{
"category": "product_version",
"name": "7.5.0 UP13 IF01",
"product": {
"name": "IBM QRadar SIEM 7.5.0 UP13 IF01",
"product_id": "T046492-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up13_if01"
}
}
}
],
"category": "product_name",
"name": "QRadar SIEM"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-17543",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2019-17543"
},
{
"cve": "CVE-2019-5427",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2019-5427"
},
{
"cve": "CVE-2020-5260",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2020-5260"
},
{
"cve": "CVE-2022-49058",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-49058"
},
{
"cve": "CVE-2022-49111",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-49111"
},
{
"cve": "CVE-2022-49136",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-49136"
},
{
"cve": "CVE-2022-49788",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-49788"
},
{
"cve": "CVE-2022-49846",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-49846"
},
{
"cve": "CVE-2022-49977",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-49977"
},
{
"cve": "CVE-2022-50020",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-50020"
},
{
"cve": "CVE-2024-23337",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-23337"
},
{
"cve": "CVE-2024-28956",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-28956"
},
{
"cve": "CVE-2024-34397",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-34397"
},
{
"cve": "CVE-2024-43420",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-43420"
},
{
"cve": "CVE-2024-45332",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-45332"
},
{
"cve": "CVE-2024-50154",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-50154"
},
{
"cve": "CVE-2024-50349",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-50349"
},
{
"cve": "CVE-2024-52006",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-52006"
},
{
"cve": "CVE-2024-52533",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-52533"
},
{
"cve": "CVE-2024-53920",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-53920"
},
{
"cve": "CVE-2024-54661",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-54661"
},
{
"cve": "CVE-2024-57980",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-57980"
},
{
"cve": "CVE-2024-58002",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-58002"
},
{
"cve": "CVE-2024-6531",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-6531"
},
{
"cve": "CVE-2025-20012",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-20012"
},
{
"cve": "CVE-2025-20623",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-20623"
},
{
"cve": "CVE-2025-21905",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-21905"
},
{
"cve": "CVE-2025-21919",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-21919"
},
{
"cve": "CVE-2025-21928",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-21928"
},
{
"cve": "CVE-2025-21991",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-21991"
},
{
"cve": "CVE-2025-22004",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-22004"
},
{
"cve": "CVE-2025-22020",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-22020"
},
{
"cve": "CVE-2025-23150",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-23150"
},
{
"cve": "CVE-2025-24495",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-24495"
},
{
"cve": "CVE-2025-27613",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-27613"
},
{
"cve": "CVE-2025-27614",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-27614"
},
{
"cve": "CVE-2025-32415",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-32415"
},
{
"cve": "CVE-2025-37738",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-37738"
},
{
"cve": "CVE-2025-37890",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-37890"
},
{
"cve": "CVE-2025-38052",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-38052"
},
{
"cve": "CVE-2025-38079",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-38079"
},
{
"cve": "CVE-2025-38086",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-38086"
},
{
"cve": "CVE-2025-4373",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-4373"
},
{
"cve": "CVE-2025-46835",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-46835"
},
{
"cve": "CVE-2025-47273",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-47273"
},
{
"cve": "CVE-2025-48060",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-48060"
},
{
"cve": "CVE-2025-48384",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-48384"
},
{
"cve": "CVE-2025-48385",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-48385"
},
{
"cve": "CVE-2025-49794",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-49794"
},
{
"cve": "CVE-2025-49796",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-49796"
},
{
"cve": "CVE-2025-52434",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-52434"
},
{
"cve": "CVE-2025-52520",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-52520"
},
{
"cve": "CVE-2025-53506",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-53506"
},
{
"cve": "CVE-2025-55668",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-55668"
},
{
"cve": "CVE-2025-6021",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-6021"
},
{
"cve": "CVE-2025-6965",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-6965"
},
{
"cve": "CVE-2025-7425",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-7425"
}
]
}
fkie_cve-2024-43420
Vulnerability from fkie_nvd
Published
2025-05-13 21:16
Modified
2025-05-16 14:43
Severity ?
Summary
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access."
},
{
"lang": "es",
"value": "La exposici\u00f3n de informaci\u00f3n confidencial causada por un estado predictor de microarquitectura compartido que influye en la ejecuci\u00f3n transitoria de algunos procesadores Intel Atom\u00ae puede permitir que un usuario autenticado habilite potencialmente la divulgaci\u00f3n de informaci\u00f3n a trav\u00e9s del acceso local."
}
],
"id": "CVE-2024-43420",
"lastModified": "2025-05-16T14:43:56.797",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.1,
"impactScore": 4.0,
"source": "secure@intel.com",
"type": "Secondary"
}
],
"cvssMetricV40": [
{
"cvssData": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"availabilityRequirement": "NOT_DEFINED",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityRequirement": "NOT_DEFINED",
"exploitMaturity": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"source": "secure@intel.com",
"type": "Secondary"
}
]
},
"published": "2025-05-13T21:16:01.103",
"references": [
{
"source": "secure@intel.com",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"sourceIdentifier": "secure@intel.com",
"vulnStatus": "Awaiting Analysis"
}
ghsa-6gp3-r6r7-wq4f
Vulnerability from github
Published
2025-05-13 21:30
Modified
2025-05-13 21:30
Severity ?
5.6 (Medium) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
5.7 (Medium) - CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
5.7 (Medium) - CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
VLAI Severity ?
Details
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.
{
"affected": [],
"aliases": [
"CVE-2024-43420"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-13T21:16:01Z",
"severity": "MODERATE"
},
"details": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"id": "GHSA-6gp3-r6r7-wq4f",
"modified": "2025-05-13T21:30:54Z",
"published": "2025-05-13T21:30:54Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"type": "WEB",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"type": "CVSS_V4"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…