Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat microcode_ctl Security Update Affects Server Performance

published 1 year ago

Summary

A security update is available for the microcode_ctl package on Red Hat servers. This update fixes a potential security issue that could allow an attacker to cause a denial of service, which could lead to performance issues on affected servers. System administrators should apply the update to ensure their servers remain secure and stable.

What to do

Update redhat microcode_ctl to version 4:20220207-1.20250512.1.el9_0.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:9.0::baseos	redhat	microcode_ctl	< 4:20220207-1.20250512.1.el9_0 Fix: upgrade to 4:20220207-1.20250512.1.el9_0

Original advisory text

Red Hat Security Advisory: microcode_ctl security update

References

https://access.redhat.com/errata/RHSA-2025:10103 Vendor Advisory
https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2366089 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2366114 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2366125 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10103.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2024-28956 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-28956 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-28956 Vendor Advisory
https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html Third Party Advisory
https://www.vusec.net/projects/training-solo/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-43420 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2366159 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-43420 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-43420 Vendor Advisory
https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-45332 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2366162 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-45332 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-45332 Vendor Advisory
http://www.openwall.com/lists/oss-security/2025/05/13/7 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-20012 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-20012 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-20012 Vendor Advisory
https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-20623 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2366133 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-20623 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-20623 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-24495 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-24495 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-24495 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

5.6 Medium

Timeline

Published2 Jul 2025

Updated12 Jul 2026

First seen12 Jul 2026

Sources

RHSA-2025:10103 · OSV

Track software like this

Free during beta