Skip to content
OpenAdvisories
Medium ALSA-2025:7043 3 CVEs

Moderate: microcode_ctl security update

Published May 13, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The microcode_ctl packages provide microcode updates for Intel and AMD processors.

Security Fix(es):

* microcode_ctl: Improper input validation in UEFI firmware (CVE-2024-28047)
* microcode_ctl: Insufficient granularity of access control in UEFI firmware (CVE-2024-39279)
* microcode_ctl: mproper initialization in UEFI firmware OutOfBandXML module (CVE-2024-31157)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

Fixed packages 1

ReleasePackageFixed in
AlmaLinux · 9 microcode_ctl 4:20250211-1.el9_6

Vulnerabilities 3

References

  • report
    https://access.redhat.com/security/cve/CVE-2024-28047
  • report
    https://access.redhat.com/security/cve/CVE-2024-31157
  • report
    https://access.redhat.com/security/cve/CVE-2024-39279
  • report
    https://bugzilla.redhat.com/2345363
  • report
    https://bugzilla.redhat.com/2345381
  • report
    https://bugzilla.redhat.com/2345421
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-7043.html