https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:00:12.860034+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:7043 ALSA-2025:7043 — Moderate: microcode_ctl security update 2026-10-04T05:00:13.008164+00:00

Affected: AlmaLinux:9: microcode_ctl

The microcode_ctl packages provide microcode updates for Intel and AMD processors.

Security Fix(es):

* microcode_ctl: Improper input validation in UEFI firmware (CVE-2024-28047) * microcode_ctl: Insufficient granularity of access control in UEFI firmware (CVE-2024-39279) * microcode_ctl: mproper initialization in UEFI firmware OutOfBandXML module (CVE-2024-31157)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-02098 bdu:2025-02098 2026-10-04T05:00:13.008233+00:00 bdu:2025-02098 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0119 certfr-2025-avi-0119 — De multiples vulnérabilités ont été découvertes dans les produits Intel. Certaines d'entre elles permettent à un attaqu… 2026-10-04T05:00:13.008251+00:00 certfr-2025-avi-0119 https://cve.radiocsirt.org/vuln/euvd-2026-258140 EUVD-2026-258140 2026-10-04T05:00:13.008268+00:00 EUVD-2026-258140 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39279 fkie_cve-2024-39279 2026-10-04T05:00:13.008278+00:00

Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access.

 https://cve.radiocsirt.org/vuln/ghsa-pw2v-hvc7-4w3q GHSA-pw2v-hvc7-4w3q 2026-10-04T05:00:13.008300+00:00

Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access.

 https://cve.radiocsirt.org/vuln/oesa-2025-1171 OESA-2025-1171 — microcode_ctl security update 2026-10-04T05:00:13.008313+00:00

Affected: openEuler:20.03-LTS-SP4: microcode_ctl, openEuler:22.03-LTS-SP3: microcode_ctl, openEuler:22.03-LTS-SP4: microcode_ctl, openEuler:24.03-LTS: microcode_ctl, openEuler:24.03-LTS-SP1: microcode_ctl

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fix(es):

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-34440)

Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-43758)

Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation of privilege via local access.(CVE-2024-24582)

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.(CVE-2024-28047)

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2024-28127)

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2024-29214)

Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via local access.(CVE-2024-31068)

Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allo…

 https://cve.radiocsirt.org/vuln/rhea-2025:3114 RHEA-2025:3114 — Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update 2026-10-04T05:00:13.008475+00:00

microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in UEFI firmware CseVariableStorageSmm kernel: microcode_ctl: From CVEorg collector microcode_ctl: Improper initialization in UEFI firmware OutOfBandXML module kernel: microcode_ctl: From CVEorg collector microcode_ctl: Insufficient granularity of access control in UEFI firmware

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-39279 UBUNTU-CVE-2024-39279 2026-10-04T05:00:13.008549+00:00

Affected: Ubuntu:Pro:14.04:LTS: intel-microcode, Ubuntu:Pro:16.04:LTS: intel-microcode, Ubuntu:Pro:18.04:LTS: intel-microcode, Ubuntu:20.04:LTS: intel-microcode, Ubuntu:22.04:LTS: intel-microcode, Ubuntu:24.04:LTS: intel-microcode

Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0323 WID-SEC-W-2025-0323 — Intel Firmware: Mehrere Schwachstellen 2026-10-04T05:00:13.008610+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in der Intel Firmware ausnutzen, um erweiterte Rechte zu erlangen, einen Denial of Service Zustand herbeizuführen oder vertrauliche Informationen preiszugeben.