Most recent entries from all

ALSA-2025:7043 — Moderate: microcode_ctl security update

Affected: AlmaLinux:9: microcode_ctl

The microcode_ctl packages provide microcode updates for Intel and AMD processors.

Security Fix(es):

* microcode_ctl: Improper input validation in UEFI firmware (CVE-2024-28047) * microcode_ctl: Insufficient granularity of access control in UEFI firmware (CVE-2024-39279) * microcode_ctl: mproper initialization in UEFI firmware OutOfBandXML module (CVE-2024-31157)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

bdu:2025-02098

certfr-2025-avi-0119 — De multiples vulnérabilités ont été découvertes dans les produits Intel. Certaines d'entre elles permettent à un attaqu…

certfr-2025-avi-0119

EUVD-2026-258140

fkie_cve-2024-39279

Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access.

GHSA-pw2v-hvc7-4w3q

Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access.

OESA-2025-1171 — microcode_ctl security update

Affected: openEuler:20.03-LTS-SP4: microcode_ctl, openEuler:22.03-LTS-SP3: microcode_ctl, openEuler:22.03-LTS-SP4: microcode_ctl, openEuler:24.03-LTS: microcode_ctl, openEuler:24.03-LTS-SP1: microcode_ctl

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fix(es):

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-34440)

Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-43758)

Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation of privilege via local access.(CVE-2024-24582)

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.(CVE-2024-28047)

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2024-28127)

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2024-29214)

Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via local access.(CVE-2024-31068)

Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allo…

RHEA-2025:3114 — Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in UEFI firmware CseVariableStorageSmm kernel: microcode_ctl: From CVEorg collector microcode_ctl: Improper initialization in UEFI firmware OutOfBandXML module kernel: microcode_ctl: From CVEorg collector microcode_ctl: Insufficient granularity of access control in UEFI firmware

UBUNTU-CVE-2024-39279

Affected: Ubuntu:Pro:14.04:LTS: intel-microcode, Ubuntu:Pro:16.04:LTS: intel-microcode, Ubuntu:Pro:18.04:LTS: intel-microcode, Ubuntu:20.04:LTS: intel-microcode, Ubuntu:22.04:LTS: intel-microcode, Ubuntu:24.04:LTS: intel-microcode

Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access.

WID-SEC-W-2025-0323 — Intel Firmware: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in der Intel Firmware ausnutzen, um erweiterte Rechte zu erlangen, einen Denial of Service Zustand herbeizuführen oder vertrauliche Informationen preiszugeben.