Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-24495 (GCVE-0-2025-24495)
Vulnerability from cvelistv5
Published
2025-05-13 21:02
Modified
2025-05-14 17:18
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Information Disclosure
- CWE-1419 - Incorrect Initialization of Resource
Summary
Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| n/a | Intel(R) Core™ Ultra Processors |
Version: See references |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-24495",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-05-14T17:16:37.903788Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-05-14T17:18:39.190Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Intel(R) Core\u2122 Ultra Processors",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "See references"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core\u2122 Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"cvssV4_0": {
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Information Disclosure",
"lang": "en"
},
{
"cweId": "CWE-1419",
"description": "Incorrect Initialization of Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-13T21:02:51.390Z",
"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
"shortName": "intel"
},
"references": [
{
"name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
"assignerShortName": "intel",
"cveId": "CVE-2025-24495",
"datePublished": "2025-05-13T21:02:51.390Z",
"dateReserved": "2025-02-04T04:00:22.133Z",
"dateUpdated": "2025-05-14T17:18:39.190Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2025-24495\",\"sourceIdentifier\":\"secure@intel.com\",\"published\":\"2025-05-13T21:16:11.237\",\"lastModified\":\"2025-05-16T14:43:56.797\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core\u2122 Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.\"},{\"lang\":\"es\",\"value\":\"La inicializaci\u00f3n incorrecta de recursos en la unidad de predicci\u00f3n de rama para algunos procesadores Intel(R) Core\u2122 Ultra puede permitir que un usuario autenticado habilite potencialmente la divulgaci\u00f3n de informaci\u00f3n a trav\u00e9s del acceso local.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"secure@intel.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":6.8,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"attackRequirements\":\"PRESENT\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"secure@intel.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N\",\"baseScore\":5.6,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.1,\"impactScore\":4.0}]},\"references\":[{\"url\":\"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html\",\"source\":\"secure@intel.com\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-24495\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-05-14T17:16:37.903788Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-14T17:17:22.942Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 5.6, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}, \"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 6.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"attackRequirements\": \"PRESENT\", \"privilegesRequired\": \"LOW\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"NONE\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"n/a\", \"product\": \"Intel(R) Core\\u2122 Ultra Processors\", \"versions\": [{\"status\": \"affected\", \"version\": \"See references\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html\", \"name\": \"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core\\u2122 Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"Information Disclosure\"}, {\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1419\", \"description\": \"Incorrect Initialization of Resource\"}]}], \"providerMetadata\": {\"orgId\": \"6dda929c-bb53-4a77-a76d-48e79601a1ce\", \"shortName\": \"intel\", \"dateUpdated\": \"2025-05-13T21:02:51.390Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-24495\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-14T17:18:39.190Z\", \"dateReserved\": \"2025-02-04T04:00:22.133Z\", \"assignerOrgId\": \"6dda929c-bb53-4a77-a76d-48e79601a1ce\", \"datePublished\": \"2025-05-13T21:02:51.390Z\", \"assignerShortName\": \"intel\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
rhsa-2025:10991
Vulnerability from csaf_redhat
Published
2025-07-14 18:06
Modified
2025-09-10 15:32
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10991",
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10991.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-09-10T15:32:18+00:00",
"generator": {
"date": "2025-09-10T15:32:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.7"
}
},
"id": "RHSA-2025:10991",
"initial_release_date": "2025-07-14T18:06:22+00:00",
"revision_history": [
{
"date": "2025-07-14T18:06:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-14T18:06:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-10T15:32:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20250512-1.el8_10.src",
"product": {
"name": "microcode_ctl-4:20250512-1.el8_10.src",
"product_id": "microcode_ctl-4:20250512-1.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20250512-1.el8_10?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20250512-1.el8_10.x86_64",
"product": {
"name": "microcode_ctl-4:20250512-1.el8_10.x86_64",
"product_id": "microcode_ctl-4:20250512-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20250512-1.el8_10?arch=x86_64\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20250512-1.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src"
},
"product_reference": "microcode_ctl-4:20250512-1.el8_10.src",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20250512-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
},
"product_reference": "microcode_ctl-4:20250512-1.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-14T18:06:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-14T18:06:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-14T18:06:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-14T18:06:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-14T18:06:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-14T18:06:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:microcode_ctl-4:20250512-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10102
Vulnerability from csaf_redhat
Published
2025-07-01 14:55
Modified
2025-09-10 15:31
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2025-24495)
* microcode_ctl: From CVEorg collector (CVE-2025-20012)
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2025-24495)\n\n* microcode_ctl: From CVEorg collector (CVE-2025-20012)\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10102",
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10102.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-09-10T15:31:18+00:00",
"generator": {
"date": "2025-09-10T15:31:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.7"
}
},
"id": "RHSA-2025:10102",
"initial_release_date": "2025-07-01T14:55:04+00:00",
"revision_history": [
{
"date": "2025-07-01T14:55:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T14:55:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-10T15:31:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:9.2::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src",
"product": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src",
"product_id": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220809-2.20250512.1.el9_2?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"product": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"product_id": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220809-2.20250512.1.el9_2?arch=noarch\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch"
},
"product_reference": "microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
},
"product_reference": "microcode_ctl-4:20220809-2.20250512.1.el9_2.src",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:55:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:55:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:55:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:55:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:55:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:55:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.noarch",
"BaseOS-9.2.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el9_2.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhba-2025:9433
Vulnerability from csaf_redhat
Published
2025-06-24 02:16
Modified
2025-09-10 13:34
Summary
Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Bug Fix(es) and Enhancement(s):
* Update microcode_ctl to latest upstream [rhel-9.6.z] (JIRA:RHEL-96929)
* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91226)
* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91233)
* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91241)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nBug Fix(es) and Enhancement(s):\n\n* Update microcode_ctl to latest upstream [rhel-9.6.z] (JIRA:RHEL-96929)\n\n* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91226)\n\n* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91233)\n\n* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91241)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2025:9433",
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
},
{
"category": "external",
"summary": "RHEL-96929",
"url": "https://issues.redhat.com/browse/RHEL-96929"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_9433.json"
}
],
"title": "Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update",
"tracking": {
"current_release_date": "2025-09-10T13:34:01+00:00",
"generator": {
"date": "2025-09-10T13:34:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.7"
}
},
"id": "RHBA-2025:9433",
"initial_release_date": "2025-06-24T02:16:25+00:00",
"revision_history": [
{
"date": "2025-06-24T02:16:25+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-06-24T02:16:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-10T13:34:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
"product": {
"name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
"product_id": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20250211-1.20250512.1.el9_6?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"product": {
"name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"product_id": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20250211-1.20250512.1.el9_6?arch=noarch\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch"
},
"product_reference": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
},
"product_reference": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-24T02:16:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-24T02:16:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-24T02:16:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-24T02:16:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-24T02:16:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-24T02:16:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:9433"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
"BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10103
Vulnerability from csaf_redhat
Published
2025-07-01 14:44
Modified
2025-09-10 15:31
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2025-24495)
* microcode_ctl: From CVEorg collector (CVE-2025-20012)
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2025-24495)\n\n* microcode_ctl: From CVEorg collector (CVE-2025-20012)\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10103",
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10103.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-09-10T15:31:18+00:00",
"generator": {
"date": "2025-09-10T15:31:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.7"
}
},
"id": "RHSA-2025:10103",
"initial_release_date": "2025-07-01T14:44:03+00:00",
"revision_history": [
{
"date": "2025-07-01T14:44:03+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T14:44:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-10T15:31:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
"product_id": "BaseOS-9.0.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:9.0::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src",
"product": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src",
"product_id": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220207-1.20250512.1.el9_0?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"product": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"product_id": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220207-1.20250512.1.el9_0?arch=noarch\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
"product_id": "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
"product_id": "BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el9_0.src",
"relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:44:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:44:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:44:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:44:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:44:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T14:44:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.noarch",
"BaseOS-9.0.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el9_0.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10107
Vulnerability from csaf_redhat
Published
2025-07-01 15:33
Modified
2025-09-10 15:31
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10107",
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10107.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-09-10T15:31:19+00:00",
"generator": {
"date": "2025-09-10T15:31:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.7"
}
},
"id": "RHSA-2025:10107",
"initial_release_date": "2025-07-01T15:33:58+00:00",
"revision_history": [
{
"date": "2025-07-01T15:33:58+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T15:33:58+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-10T15:31:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.4::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"product": {
"name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"product_id": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20210216-1.20250512.1.el8_4?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64",
"product": {
"name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64",
"product_id": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20210216-1.20250512.1.el8_4?arch=x86_64\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src"
},
"product_reference": "microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
},
"product_reference": "microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:33:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:33:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:33:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:33:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:33:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:33:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.src",
"BaseOS-8.4.0.Z.AUS:microcode_ctl-4:20210216-1.20250512.1.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10111
Vulnerability from csaf_redhat
Published
2025-07-01 15:49
Modified
2025-09-10 15:31
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10111",
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10111.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-09-10T15:31:22+00:00",
"generator": {
"date": "2025-09-10T15:31:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.7"
}
},
"id": "RHSA-2025:10111",
"initial_release_date": "2025-07-01T15:49:13+00:00",
"revision_history": [
{
"date": "2025-07-01T15:49:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T15:49:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-10T15:31:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product": {
"name": "Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:7.7::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-53.26.el7_7.1.src",
"product": {
"name": "microcode_ctl-2:2.1-53.26.el7_7.1.src",
"product_id": "microcode_ctl-2:2.1-53.26.el7_7.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-53.26.el7_7.1?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"product": {
"name": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"product_id": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-53.26.el7_7.1?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64",
"product": {
"name": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64",
"product_id": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl-debuginfo@2.1-53.26.el7_7.1?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-53.26.el7_7.1.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src"
},
"product_reference": "microcode_ctl-2:2.1-53.26.el7_7.1.src",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64"
},
"product_reference": "microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:49:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:49:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:49:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:49:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:49:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:49:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.src",
"7Server-7.7.AUS:microcode_ctl-2:2.1-53.26.el7_7.1.x86_64",
"7Server-7.7.AUS:microcode_ctl-debuginfo-2:2.1-53.26.el7_7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10162
Vulnerability from csaf_redhat
Published
2025-07-01 19:48
Modified
2025-09-10 15:31
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10162",
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10162.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-09-10T15:31:23+00:00",
"generator": {
"date": "2025-09-10T15:31:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.7"
}
},
"id": "RHSA-2025:10162",
"initial_release_date": "2025-07-01T19:48:14+00:00",
"revision_history": [
{
"date": "2025-07-01T19:48:14+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T19:48:14+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-10T15:31:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:8.8::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_tus:8.8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"product": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"product_id": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220809-2.20250512.1.el8_8?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"product": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"product_id": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220809-2.20250512.1.el8_8?arch=x86_64\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src"
},
"product_reference": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
},
"product_reference": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src"
},
"product_reference": "microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
},
"product_reference": "microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T19:48:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T19:48:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T19:48:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T19:48:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T19:48:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T19:48:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.src",
"BaseOS-8.8.0.Z.TUS:microcode_ctl-4:20220809-2.20250512.1.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10108
Vulnerability from csaf_redhat
Published
2025-07-01 15:39
Modified
2025-09-10 15:31
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10108",
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10108.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-09-10T15:31:19+00:00",
"generator": {
"date": "2025-09-10T15:31:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.7"
}
},
"id": "RHSA-2025:10108",
"initial_release_date": "2025-07-01T15:39:18+00:00",
"revision_history": [
{
"date": "2025-07-01T15:39:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T15:39:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-10T15:31:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-73.24.el7_9.src",
"product": {
"name": "microcode_ctl-2:2.1-73.24.el7_9.src",
"product_id": "microcode_ctl-2:2.1-73.24.el7_9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-73.24.el7_9?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"product": {
"name": "microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"product_id": "microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-73.24.el7_9?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64",
"product": {
"name": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64",
"product_id": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl-debuginfo@2.1-73.24.el7_9?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-73.24.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src"
},
"product_reference": "microcode_ctl-2:2.1-73.24.el7_9.src",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-73.24.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64"
},
"product_reference": "microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64",
"relates_to_product_reference": "7Server-ELS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:39:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:39:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:39:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:39:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:39:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:39:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.src",
"7Server-ELS:microcode_ctl-2:2.1-73.24.el7_9.x86_64",
"7Server-ELS:microcode_ctl-debuginfo-2:2.1-73.24.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10101
Vulnerability from csaf_redhat
Published
2025-07-01 15:24
Modified
2025-09-10 15:31
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2025-24495)
* microcode_ctl: From CVEorg collector (CVE-2025-20012)
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2025-24495)\n\n* microcode_ctl: From CVEorg collector (CVE-2025-20012)\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10101",
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10101.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-09-10T15:31:18+00:00",
"generator": {
"date": "2025-09-10T15:31:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.7"
}
},
"id": "RHSA-2025:10101",
"initial_release_date": "2025-07-01T15:24:53+00:00",
"revision_history": [
{
"date": "2025-07-01T15:24:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T15:24:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-10T15:31:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:9.4::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
"product": {
"name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
"product_id": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20230808-2.20250512.1.el9_4?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"product": {
"name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"product_id": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20230808-2.20250512.1.el9_4?arch=noarch\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch"
},
"product_reference": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
},
"product_reference": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:24:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:24:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:24:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:24:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:24:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T15:24:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
"BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10126
Vulnerability from csaf_redhat
Published
2025-07-01 16:55
Modified
2025-09-10 15:31
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10126",
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10126.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-09-10T15:31:21+00:00",
"generator": {
"date": "2025-09-10T15:31:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.7"
}
},
"id": "RHSA-2025:10126",
"initial_release_date": "2025-07-01T16:55:49+00:00",
"revision_history": [
{
"date": "2025-07-01T16:55:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T16:55:49+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-10T15:31:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.2::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"product": {
"name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"product_id": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20191115-4.20250512.1.el8_2?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64",
"product": {
"name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64",
"product_id": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20191115-4.20250512.1.el8_2?arch=x86_64\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src"
},
"product_reference": "microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
},
"product_reference": "microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T16:55:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T16:55:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T16:55:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T16:55:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T16:55:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T16:55:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.src",
"BaseOS-8.2.0.Z.AUS:microcode_ctl-4:20191115-4.20250512.1.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
rhsa-2025:10109
Vulnerability from csaf_redhat
Published
2025-07-01 18:51
Modified
2025-09-10 15:31
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:10109",
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10109.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-09-10T15:31:19+00:00",
"generator": {
"date": "2025-09-10T15:31:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.7"
}
},
"id": "RHSA-2025:10109",
"initial_release_date": "2025-07-01T18:51:54+00:00",
"revision_history": [
{
"date": "2025-07-01T18:51:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-07-01T18:51:54+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-10T15:31:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.6::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:8.6::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_tus:8.6::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"product": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"product_id": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220207-1.20250512.1.el8_6?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"product": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"product_id": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20220207-1.20250512.1.el8_6?arch=x86_64\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
},
"product_reference": "microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"cwe": {
"id": "CWE-1421",
"name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
},
"discovery_date": "2025-05-13T22:03:30.376335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366125"
}
],
"notes": [
{
"category": "description",
"text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28956"
},
{
"category": "external",
"summary": "RHBZ#2366125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:56.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T18:51:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2024-43420",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:09.641634+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366159"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43420"
},
{
"category": "external",
"summary": "RHBZ#2366159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:09.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T18:51:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2024-45332",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:05:16.220402+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366162"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45332"
},
{
"category": "external",
"summary": "RHBZ#2366162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
"url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:03:12.207000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T18:51:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-20012",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"discovery_date": "2025-05-13T22:02:43.991918+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366114"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20012"
},
{
"category": "external",
"summary": "RHBZ#2366114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"release_date": "2025-05-13T21:01:33.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T18:51:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
},
{
"cve": "CVE-2025-20623",
"cwe": {
"id": "CWE-1423",
"name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
},
"discovery_date": "2025-05-13T22:03:55.575358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366133"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: Exposure of sensitive information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-20623"
},
{
"category": "external",
"summary": "RHBZ#2366133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
}
],
"release_date": "2025-05-13T21:02:26.040000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T18:51:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: Exposure of sensitive information"
},
{
"cve": "CVE-2025-24495",
"cwe": {
"id": "CWE-1419",
"name": "Incorrect Initialization of Resource"
},
"discovery_date": "2025-05-13T22:01:12.147444+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366089"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "microcode_ctl: From CVEorg collector",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24495"
},
{
"category": "external",
"summary": "RHBZ#2366089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"category": "external",
"summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "https://www.vusec.net/projects/training-solo/",
"url": "https://www.vusec.net/projects/training-solo/"
}
],
"release_date": "2025-05-13T21:02:51.390000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-07-01T18:51:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.E4S:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.src",
"BaseOS-8.6.0.Z.TUS:microcode_ctl-4:20220207-1.20250512.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "microcode_ctl: From CVEorg collector"
}
]
}
wid-sec-w-2025-1905
Vulnerability from csaf_certbund
Published
2025-08-25 22:00
Modified
2025-08-27 22:00
Summary
IBM QRadar SIEM Komponente: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
IBM QRadar Security Information and Event Management (SIEM) bietet Unterstützung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.
Angriff
Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM Komponenten ausnutzen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.
Betroffene Betriebssysteme
- Linux
- UNIX
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "IBM QRadar Security Information and Event Management (SIEM) bietet Unterst\u00fctzung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM Komponenten ausnutzen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuf\u00fchren, um beliebigen Programmcode auszuf\u00fchren, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-1905 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1905.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-1905 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1905"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7243011 vom 2025-08-25",
"url": "https://www.ibm.com/support/pages/node/7243011"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:14746 vom 2025-08-27",
"url": "https://access.redhat.com/errata/RHSA-2025:14746"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:14748 vom 2025-08-27",
"url": "https://access.redhat.com/errata/RHSA-2025:14748"
}
],
"source_lang": "en-US",
"title": "IBM QRadar SIEM Komponente: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-08-27T22:00:00.000+00:00",
"generator": {
"date": "2025-08-28T05:52:03.530+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.4.0"
}
},
"id": "WID-SEC-W-2025-1905",
"initial_release_date": "2025-08-25T22:00:00.000+00:00",
"revision_history": [
{
"date": "2025-08-25T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2025-08-27T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c7.5.0 UP13 IF01",
"product": {
"name": "IBM QRadar SIEM \u003c7.5.0 UP13 IF01",
"product_id": "T046492"
}
},
{
"category": "product_version",
"name": "7.5.0 UP13 IF01",
"product": {
"name": "IBM QRadar SIEM 7.5.0 UP13 IF01",
"product_id": "T046492-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up13_if01"
}
}
}
],
"category": "product_name",
"name": "QRadar SIEM"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-17543",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2019-17543"
},
{
"cve": "CVE-2019-5427",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2019-5427"
},
{
"cve": "CVE-2020-5260",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2020-5260"
},
{
"cve": "CVE-2022-49058",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-49058"
},
{
"cve": "CVE-2022-49111",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-49111"
},
{
"cve": "CVE-2022-49136",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-49136"
},
{
"cve": "CVE-2022-49788",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-49788"
},
{
"cve": "CVE-2022-49846",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-49846"
},
{
"cve": "CVE-2022-49977",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-49977"
},
{
"cve": "CVE-2022-50020",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2022-50020"
},
{
"cve": "CVE-2024-23337",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-23337"
},
{
"cve": "CVE-2024-28956",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-28956"
},
{
"cve": "CVE-2024-34397",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-34397"
},
{
"cve": "CVE-2024-43420",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-43420"
},
{
"cve": "CVE-2024-45332",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-45332"
},
{
"cve": "CVE-2024-50154",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-50154"
},
{
"cve": "CVE-2024-50349",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-50349"
},
{
"cve": "CVE-2024-52006",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-52006"
},
{
"cve": "CVE-2024-52533",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-52533"
},
{
"cve": "CVE-2024-53920",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-53920"
},
{
"cve": "CVE-2024-54661",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-54661"
},
{
"cve": "CVE-2024-57980",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-57980"
},
{
"cve": "CVE-2024-58002",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-58002"
},
{
"cve": "CVE-2024-6531",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2024-6531"
},
{
"cve": "CVE-2025-20012",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-20012"
},
{
"cve": "CVE-2025-20623",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-20623"
},
{
"cve": "CVE-2025-21905",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-21905"
},
{
"cve": "CVE-2025-21919",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-21919"
},
{
"cve": "CVE-2025-21928",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-21928"
},
{
"cve": "CVE-2025-21991",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-21991"
},
{
"cve": "CVE-2025-22004",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-22004"
},
{
"cve": "CVE-2025-22020",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-22020"
},
{
"cve": "CVE-2025-23150",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-23150"
},
{
"cve": "CVE-2025-24495",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-24495"
},
{
"cve": "CVE-2025-27613",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-27613"
},
{
"cve": "CVE-2025-27614",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-27614"
},
{
"cve": "CVE-2025-32415",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-32415"
},
{
"cve": "CVE-2025-37738",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-37738"
},
{
"cve": "CVE-2025-37890",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-37890"
},
{
"cve": "CVE-2025-38052",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-38052"
},
{
"cve": "CVE-2025-38079",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-38079"
},
{
"cve": "CVE-2025-38086",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-38086"
},
{
"cve": "CVE-2025-4373",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-4373"
},
{
"cve": "CVE-2025-46835",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-46835"
},
{
"cve": "CVE-2025-47273",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-47273"
},
{
"cve": "CVE-2025-48060",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-48060"
},
{
"cve": "CVE-2025-48384",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-48384"
},
{
"cve": "CVE-2025-48385",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-48385"
},
{
"cve": "CVE-2025-49794",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-49794"
},
{
"cve": "CVE-2025-49796",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-49796"
},
{
"cve": "CVE-2025-52434",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-52434"
},
{
"cve": "CVE-2025-52520",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-52520"
},
{
"cve": "CVE-2025-53506",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-53506"
},
{
"cve": "CVE-2025-55668",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-55668"
},
{
"cve": "CVE-2025-6021",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-6021"
},
{
"cve": "CVE-2025-6965",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-6965"
},
{
"cve": "CVE-2025-7425",
"product_status": {
"known_affected": [
"67646",
"T046492"
]
},
"release_date": "2025-08-25T22:00:00.000+00:00",
"title": "CVE-2025-7425"
}
]
}
wid-sec-w-2025-1001
Vulnerability from csaf_certbund
Published
2025-05-12 22:00
Modified
2025-09-09 22:00
Summary
Intel Prozessoren: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Der Prozessor ist das zentrale Rechenwerk eines Computers.
Angriff
Ein lokaler Angreifer kann mehrere Schwachstellen in unterschiedlichen Intel Prozessoren ausnutzen, um Informationen offenzulegen.
Betroffene Betriebssysteme
- BIOS/Firmware
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Der Prozessor ist das zentrale Rechenwerk eines Computers.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann mehrere Schwachstellen in unterschiedlichen Intel Prozessoren ausnutzen, um Informationen offenzulegen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- BIOS/Firmware",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-1001 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1001.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-1001 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1001"
},
{
"category": "external",
"summary": "2025.1 IPU - Intel Processor Advisory vom 2025-05-12",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
},
{
"category": "external",
"summary": "Intel Core Ultra Processor Firmware Advisory vom 2025-05-12",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2025-B3D59FCA78 vom 2025-05-12",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-b3d59fca78"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-20318 vom 2025-05-13",
"url": "https://linux.oracle.com/errata/ELSA-2025-20318.html"
},
{
"category": "external",
"summary": "Citrix Security Advisory CTX693178 vom 2024-05-12",
"url": "https://support.citrix.com/s/article/CTX693178-xenserver-and-citrix-hypervisor-security-update-for-cve202428956"
},
{
"category": "external",
"summary": "HPE Security Bulletin vom 2025-05-12",
"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04861en_us\u0026docLocale=en_US"
},
{
"category": "external",
"summary": "XEN Security Advisory XSA-469 vom 2025-05-12",
"url": "https://xenbits.xen.org/xsa/advisory-469.html"
},
{
"category": "external",
"summary": "Google Cloud Platform Security Bulletin GCP-2025-024 vom 2025-05-12",
"url": "https://cloud.google.com/support/bulletins#gcp-2025-024"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2025-86F39C57CE vom 2025-05-13",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-86f39c57ce"
},
{
"category": "external",
"summary": "Lenovo Security Advisory LEN-195071 vom 2025-05-14",
"url": "https://support.lenovo.com/us/en/product_security/LEN-195071"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-20323 vom 2025-05-13",
"url": "https://linux.oracle.com/errata/ELSA-2025-20323.html"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2025:15086-1 vom 2025-05-14",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ANGNTGSZ5LTAKIQQHL254Y6BCBTC33W2/"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:1567-1 vom 2025-05-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020842.html"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2025:15093-1 vom 2025-05-16",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IDMNMRHOEJBKOC4ZPMYVNMKT2SGRVB7Q/"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-4170 vom 2025-05-18",
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01614-1 vom 2025-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020870.html"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2025:15142-1 vom 2025-05-21",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KEACKX57LEHS2YKZ4PO5DYNOQRGQSDO2/"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01651-1 vom 2025-05-22",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/6G75W2R3WRICVZLBNWSHQ44DL3TMTL6V/"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01650-1 vom 2025-05-22",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020877.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5925 vom 2025-05-24",
"url": "https://lists.debian.org/debian-security-announce/2025/msg00088.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5924 vom 2025-05-23",
"url": "https://lists.debian.org/debian-security-announce/2025/msg00087.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01703-1 vom 2025-05-26",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020899.html"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2025-ABF317121E vom 2025-05-26",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-abf317121e"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2025-E5D3928F2C vom 2025-05-26",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-e5d3928f2c"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01707-1 vom 2025-05-26",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020902.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7535-1 vom 2025-05-27",
"url": "https://ubuntu.com/security/notices/USN-7535-1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01651-2 vom 2025-05-29",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020928.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2025-2872 vom 2025-05-29",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2025-2872.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20344-1 vom 2025-05-29",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020964.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20355-1 vom 2025-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021015.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20354-1 vom 2025-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021016.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-20365 vom 2025-06-09",
"url": "https://linux.oracle.com/errata/ELSA-2025-20365.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01850-1 vom 2025-06-10",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021444.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-20368 vom 2025-06-10",
"url": "https://linux.oracle.com/errata/ELSA-2025-20368.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01860-1 vom 2025-06-10",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021446.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01919-1 vom 2025-06-12",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021477.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01951-1 vom 2025-06-13",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021509.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01965-1 vom 2025-06-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021535.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01964-1 vom 2025-06-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021531.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01967-1 vom 2025-06-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021533.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01972-1 vom 2025-06-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021537.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20410-1 vom 2025-06-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021549.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:02000-1 vom 2025-06-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021568.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20424-1 vom 2025-06-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021589.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:02030-1 vom 2025-06-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021588.html"
},
{
"category": "external",
"summary": "Container-Optimized OS release notes vom 2025-06-23",
"url": "https://cloud.google.com/container-optimized-os/docs/release-notes#June_23_2025"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:02173-1 vom 2025-06-30",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021714.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:10108 vom 2025-07-01",
"url": "https://access.redhat.com/errata/RHSA-2025:10108"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:10111 vom 2025-07-02",
"url": "https://access.redhat.com/errata/RHSA-2025:10111"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:10107 vom 2025-07-01",
"url": "https://access.redhat.com/errata/RHSA-2025:10107"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:10109 vom 2025-07-01",
"url": "https://access.redhat.com/errata/RHSA-2025:10109"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:10103 vom 2025-07-02",
"url": "https://access.redhat.com/errata/RHSA-2025:10103"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:10101 vom 2025-07-01",
"url": "https://access.redhat.com/errata/RHSA-2025:10101"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:10126 vom 2025-07-02",
"url": "https://access.redhat.com/errata/RHSA-2025:10126"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:10162 vom 2025-07-01",
"url": "https://access.redhat.com/errata/RHSA-2025:10162"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:10102 vom 2025-07-02",
"url": "https://access.redhat.com/errata/RHSA-2025:10102"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-20406 vom 2025-07-08",
"url": "https://linux.oracle.com/errata/ELSA-2025-20406.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:02290-1 vom 2025-07-11",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021793.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:10991 vom 2025-07-15",
"url": "https://access.redhat.com/errata/RHSA-2025:10991"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:02321-1 vom 2025-07-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021811.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:02326-1 vom 2025-07-16",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7K2UTRMLRMJHPTYHR2DUBWFSLIRYH3TW/"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-20470 vom 2025-07-16",
"url": "https://linux.oracle.com/errata/ELSA-2025-20470.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-20471 vom 2025-07-16",
"url": "https://linux.oracle.com/errata/ELSA-2025-20471.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-20480 vom 2025-07-18",
"url": "https://linux.oracle.com/errata/ELSA-2025-20480.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-4271 vom 2025-08-13",
"url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:13962 vom 2025-08-18",
"url": "https://access.redhat.com/errata/RHSA-2025:13962"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-13962 vom 2025-08-20",
"url": "https://linux.oracle.com/errata/ELSA-2025-13962.html"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2025-339 vom 2025-09-01",
"url": "https://www.dell.com/support/kbdoc/de-de/000362542/dsa-2025-339-security-update-for-dell-avamar-data-store-gen5a-multiple-third-party-component-vulnerabilities"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-20553 vom 2025-09-10",
"url": "https://linux.oracle.com/errata/ELSA-2025-20553.html"
}
],
"source_lang": "en-US",
"title": "Intel Prozessoren: Mehrere Schwachstellen erm\u00f6glichen Offenlegung von Informationen",
"tracking": {
"current_release_date": "2025-09-09T22:00:00.000+00:00",
"generator": {
"date": "2025-09-10T05:06:22.343+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.4.0"
}
},
"id": "WID-SEC-W-2025-1001",
"initial_release_date": "2025-05-12T22:00:00.000+00:00",
"revision_history": [
{
"date": "2025-05-12T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2025-05-13T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Fedora, LENOVO und Oracle Linux aufgenommen"
},
{
"date": "2025-05-14T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von openSUSE aufgenommen"
},
{
"date": "2025-05-18T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von SUSE, openSUSE und Debian aufgenommen"
},
{
"date": "2025-05-21T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von SUSE und openSUSE aufgenommen"
},
{
"date": "2025-05-22T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-05-25T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2025-05-26T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Fedora und SUSE aufgenommen"
},
{
"date": "2025-05-27T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-05-29T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von SUSE und Amazon aufgenommen"
},
{
"date": "2025-06-02T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-09T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2025-06-10T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Oracle Linux und SUSE aufgenommen"
},
{
"date": "2025-06-11T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-15T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-16T22:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-17T22:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-19T22:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-24T22:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates aufgenommen"
},
{
"date": "2025-06-30T22:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-07-01T22:00:00.000+00:00",
"number": "21",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2025-07-08T22:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2025-07-13T22:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-07-14T22:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2025-07-15T22:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-07-16T22:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2025-07-20T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2025-07-31T22:00:00.000+00:00",
"number": "28",
"summary": "Referenz(en) aufgenommen:"
},
{
"date": "2025-08-12T22:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2025-08-17T22:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2025-08-19T22:00:00.000+00:00",
"number": "31",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2025-08-31T22:00:00.000+00:00",
"number": "32",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2025-09-09T22:00:00.000+00:00",
"number": "33",
"summary": "Neue Updates von Oracle Linux aufgenommen"
}
],
"status": "final",
"version": "33"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "8.2 CU1 LTSR",
"product": {
"name": "Citrix Systems Hypervisor 8.2 CU1 LTSR",
"product_id": "T037811",
"product_identification_helper": {
"cpe": "cpe:/o:citrix:hypervisor:8.2_cu1_ltsr"
}
}
}
],
"category": "product_name",
"name": "Hypervisor"
},
{
"branches": [
{
"category": "product_version",
"name": "8.4",
"product": {
"name": "Citrix Systems XenServer 8.4",
"product_id": "T043563",
"product_identification_helper": {
"cpe": "cpe:/a:citrix:xenserver:8.4"
}
}
}
],
"category": "product_name",
"name": "XenServer"
}
],
"category": "vendor",
"name": "Citrix Systems"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "Dell Avamar",
"product": {
"name": "Dell Avamar",
"product_id": "T039664",
"product_identification_helper": {
"cpe": "cpe:/a:dell:avamar:-"
}
}
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "Fedora Linux",
"product": {
"name": "Fedora Linux",
"product_id": "74185",
"product_identification_helper": {
"cpe": "cpe:/o:fedoraproject:fedora:-"
}
}
}
],
"category": "vendor",
"name": "Fedora"
},
{
"branches": [
{
"category": "product_name",
"name": "Google Cloud Platform",
"product": {
"name": "Google Cloud Platform",
"product_id": "393401",
"product_identification_helper": {
"cpe": "cpe:/a:google:cloud_platform:-"
}
}
},
{
"category": "product_name",
"name": "Google Container-Optimized OS",
"product": {
"name": "Google Container-Optimized OS",
"product_id": "1607324",
"product_identification_helper": {
"cpe": "cpe:/o:google:container-optimized_os:-"
}
}
}
],
"category": "vendor",
"name": "Google"
},
{
"branches": [
{
"category": "product_name",
"name": "HPE ProLiant",
"product": {
"name": "HPE ProLiant",
"product_id": "T027705",
"product_identification_helper": {
"cpe": "cpe:/h:hp:proliant:-"
}
}
},
{
"category": "product_name",
"name": "HPE Synergy",
"product": {
"name": "HPE Synergy",
"product_id": "T019820",
"product_identification_helper": {
"cpe": "cpe:/h:hpe:synergy:-"
}
}
}
],
"category": "vendor",
"name": "HPE"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Intel Prozessor",
"product": {
"name": "Intel Prozessor",
"product_id": "T036747",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:-"
}
}
},
{
"category": "product_version",
"name": "Core Ultra 5",
"product": {
"name": "Intel Prozessor Core Ultra 5",
"product_id": "T043552",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:core_ultra_5"
}
}
},
{
"category": "product_version",
"name": "Core Ultra 7",
"product": {
"name": "Intel Prozessor Core Ultra 7",
"product_id": "T043553",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:core_ultra_7"
}
}
},
{
"category": "product_version",
"name": "Core Ultra 9",
"product": {
"name": "Intel Prozessor Core Ultra 9",
"product_id": "T043554",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:core_ultra_9"
}
}
}
],
"category": "product_name",
"name": "Prozessor"
}
],
"category": "vendor",
"name": "Intel"
},
{
"branches": [
{
"category": "product_name",
"name": "Lenovo Computer",
"product": {
"name": "Lenovo Computer",
"product_id": "T026557",
"product_identification_helper": {
"cpe": "cpe:/h:lenovo:computer:-"
}
}
}
],
"category": "vendor",
"name": "Lenovo"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "4.18.x",
"product": {
"name": "Open Source Xen 4.18.x",
"product_id": "T038923",
"product_identification_helper": {
"cpe": "cpe:/o:xen:xen:4.18.x"
}
}
},
{
"category": "product_version",
"name": "4.19.x",
"product": {
"name": "Open Source Xen 4.19.x",
"product_id": "T038924",
"product_identification_helper": {
"cpe": "cpe:/o:xen:xen:4.19.x"
}
}
},
{
"category": "product_version",
"name": "4.17.x",
"product": {
"name": "Open Source Xen 4.17.x",
"product_id": "T041479",
"product_identification_helper": {
"cpe": "cpe:/o:xen:xen:4.17.x"
}
}
},
{
"category": "product_version",
"name": "4.20.x",
"product": {
"name": "Open Source Xen 4.20.x",
"product_id": "T043569",
"product_identification_helper": {
"cpe": "cpe:/o:xen:xen:4.20.x"
}
}
}
],
"category": "product_name",
"name": "Xen"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
},
{
"category": "product_name",
"name": "SUSE openSUSE",
"product": {
"name": "SUSE openSUSE",
"product_id": "T027843",
"product_identification_helper": {
"cpe": "cpe:/o:suse:opensuse:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28956",
"product_status": {
"known_affected": [
"T037811",
"T038923",
"67646",
"T036747",
"T038924",
"393401",
"T004914",
"74185",
"T039664",
"T019820",
"2951",
"T002207",
"T027705",
"T043569",
"T000126",
"T027843",
"398363",
"T026557",
"T041479",
"1607324",
"T043563"
]
},
"release_date": "2025-05-12T22:00:00.000+00:00",
"title": "CVE-2024-28956"
},
{
"cve": "CVE-2025-20012",
"product_status": {
"known_affected": [
"T037811",
"T038923",
"67646",
"T036747",
"T038924",
"393401",
"T004914",
"74185",
"T039664",
"T043553",
"T043554",
"T019820",
"2951",
"T002207",
"T027705",
"T043569",
"T000126",
"T027843",
"398363",
"T026557",
"T041479",
"1607324",
"T043552",
"T043563"
]
},
"release_date": "2025-05-12T22:00:00.000+00:00",
"title": "CVE-2025-20012"
},
{
"cve": "CVE-2025-24495",
"product_status": {
"known_affected": [
"T037811",
"T038923",
"67646",
"T036747",
"T038924",
"393401",
"T004914",
"74185",
"T039664",
"T043553",
"T043554",
"T019820",
"2951",
"T002207",
"T027705",
"T043569",
"T000126",
"T027843",
"398363",
"T026557",
"T041479",
"1607324",
"T043552",
"T043563"
]
},
"release_date": "2025-05-12T22:00:00.000+00:00",
"title": "CVE-2025-24495"
}
]
}
ghsa-7ppp-wv3j-gg8q
Vulnerability from github
Published
2025-05-13 21:30
Modified
2025-05-13 21:30
Severity ?
5.6 (Medium) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
6.8 (Medium) - CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
6.8 (Medium) - CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
VLAI Severity ?
Details
Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.
{
"affected": [],
"aliases": [
"CVE-2025-24495"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-13T21:16:11Z",
"severity": "MODERATE"
},
"details": "Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core\u2122 Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"id": "GHSA-7ppp-wv3j-gg8q",
"modified": "2025-05-13T21:30:57Z",
"published": "2025-05-13T21:30:57Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
},
{
"type": "WEB",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"type": "CVSS_V4"
}
]
}
fkie_cve-2025-24495
Vulnerability from fkie_nvd
Published
2025-05-13 21:16
Modified
2025-05-16 14:43
Severity ?
Summary
Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core\u2122 Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access."
},
{
"lang": "es",
"value": "La inicializaci\u00f3n incorrecta de recursos en la unidad de predicci\u00f3n de rama para algunos procesadores Intel(R) Core\u2122 Ultra puede permitir que un usuario autenticado habilite potencialmente la divulgaci\u00f3n de informaci\u00f3n a trav\u00e9s del acceso local."
}
],
"id": "CVE-2025-24495",
"lastModified": "2025-05-16T14:43:56.797",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.1,
"impactScore": 4.0,
"source": "secure@intel.com",
"type": "Secondary"
}
],
"cvssMetricV40": [
{
"cvssData": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"availabilityRequirement": "NOT_DEFINED",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityRequirement": "NOT_DEFINED",
"exploitMaturity": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"source": "secure@intel.com",
"type": "Secondary"
}
]
},
"published": "2025-05-13T21:16:11.237",
"references": [
{
"source": "secure@intel.com",
"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
}
],
"sourceIdentifier": "secure@intel.com",
"vulnStatus": "Awaiting Analysis"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…