Summary
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | microcode_ctl | 4:20250512-1.el8_10 |
Vulnerabilities 6
-
Medium 5.6
Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) …
-
Medium 5.6
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executi…
-
Medium 5.6
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executi…
-
Medium 5.6
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executi…
-
Medium 5.6
Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow a…
-
Medium 4.9
Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enab…
References
-
report
https://access.redhat.com/security/cve/CVE-2024-28956
-
report
https://bugzilla.redhat.com/2366125
-
advisory
https://errata.almalinux.org/8/ALSA-2025-10991.html
-
report
https://www.redhat.com/security/data/cve/CVE-2024-43420.html
-
report
https://www.redhat.com/security/data/cve/CVE-2024-45332.html
-
report
https://www.redhat.com/security/data/cve/CVE-2025-20012.html
-
report
https://www.redhat.com/security/data/cve/CVE-2025-20623.html
-
report
https://www.redhat.com/security/data/cve/CVE-2025-24495.html