Summary
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
* kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936)
Bug Fix(es) and Enhancement(s):
* [AlmaLinux 8] Update Intel CPU microcode to the latest version (JIRA:AlmaLinux-240770)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | microcode_ctl | 4:20260812-1.el8_10 |
Vulnerabilities 2
-
High 7.0
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R)…
-
Medium 4.5
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow …