Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.6
Red Hat microcode_ctl Update Fixes CPU Microcode Flaw
published 1 year ago
Summary
An update is available for Red Hat's microcode_ctl package, which fixes a flaw in the CPU microcode. This update is important for systems running Red Hat Enterprise Linux, as it helps prevent potential security risks and ensures the stability of the system. IT administrators should review and apply the update as soon as possible.
What to do
- Update redhat microcode_ctl to version 4:20191115-4.20250512.1.el8_2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_aus:8.2::baseos | redhat | microcode_ctl |
< 4:20191115-4.20250512.1.el8_2 Fix: upgrade to 4:20191115-4.20250512.1.el8_2
|
Original advisory text
Red Hat Security Advisory: microcode_ctl security update
References
- https://access.redhat.com/errata/RHSA-2025:10126 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366125 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10126.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-28956 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-28956 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-28956 Vendor Advisory
- https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html Third Party Advisory
- https://www.vusec.net/projects/training-solo/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-43420 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366159 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-43420 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-43420 Vendor Advisory
- https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-45332 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366162 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-45332 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45332 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2025/05/13/7 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-20012 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366114 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-20012 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-20012 Vendor Advisory
- https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-20623 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366133 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-20623 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-20623 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-24495 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366089 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-24495 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-24495 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published2 Jul 2025
Updated12 Jul 2026
First seen12 Jul 2026
Sources
RHSA-2025:10126 · OSV
Track software like this
Free during beta