Skip to content
OpenAdvisories
High ELSA-2026-500239 14 CVEs

Important: microcode_ctl security update (Oracle Linux 8)

Published Sep 16, 2026 · Updated Sep 16, 2026

Ecosystem: Oracle Linux

Summary

[4:20260812-1.0.3]
- disable late update for 06-ad-01
- add support for UEK7/UEK8 and ueknext kernels
- don't bother calling dracut if virtualized [Orabug: 35710077]
- ensure UEK also rebuilds initramfs [Orabug: 34280058]
- add support for UEK7 kernels
- enable early update for 06-4f-01
- remove no longer appropriate caveats for 06-2d-07 and 06-55-04
- enable early and late load on RHCK

[4:20260812-1]
- Update Intel CPU microcode to microcode-20260812 release (RHEL-240770)
- Security advisories:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html
CVE-2025-31936
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01404.html
CVE-2025-31938
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01423.html
CVE-2026-20917
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01428.html
CVE-2025-35973
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01435.html
CVE-2026-20716
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01441.html
CVE-2026-20760
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.html
CVE-2026-20713, CVE-2026-20901
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01443.html
CVE-2026-20707
- New microcode files (in hex):
06-b7-04: Raptor Lake: revision 0137
06-d5-01: Wildcat Lake: revision 000c
06-d7-00: Bartlett Lake: revision 0137
- Microcode files (/platform_mask shown) with revision updates (in hex):
06-6a-06/87: Ice Lake-X: d000421 to d000433
06-6c-01/10: Ice Lake-D: 10002f1 to 1000301
06-7e-05/80: Ice Lake-L: 00cc to 00ce
06-8f-07/87: Sapphire Rapids: 2b000670 to 2b000685
06-8f-08/10: Sapphire Rapids with HBM: 2c000421 to 2c000435
06-8f-08/87: Sapphire Rapids: 2b000670 to 2b000685
06-a7-01/02: Rocket Lake: 0065 to 0066
06-ad-01/20: Granite Rapids-X: a000142 to a000151
06-ad-01/95: Granite Rapids-X: 1000423 to 1000434
06-ae-01/97: Granite Rapids-D: 1000307 to 1000309
06-af-03/01: Crestmont (Sierra Forest): 30003a3 to 30003b2
06-b5-00/80: Arrow Lake-U: 000d to 000e
06-b7-01/36: Raptor Lake: 0133 to 0137, platform bit 04 added
06-bd-01/80: Lunar Lake: 0126 to 0128
06-c5-02/82: Arrow Lake-H: 0121 to 0122
06-c6-02/82: Arrow Lake: 0121 to 0122
06-cc-02/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02
06-cc-03/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02
06-cf-02/87: Emerald Rapids: 210002e0 to 210002f4
Resolves: RHEL-240770

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 microcode_ctl 4:20260812-1.0.3.el8_10

Vulnerabilities 14

  • High 8.5
    CVE-2026-20898

    Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors …

  • High 8.2
    CVE-2026-20715

    Improper input validation in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT) and some Intel…

  • High 7.0
    CVE-2026-20885

    Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an…

  • Medium 6.8
    CVE-2026-20705

    Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Do…

  • Medium 6.8
    CVE-2026-20707

    Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileg…

    intel-microcode intel-microcode Debian Ubuntu
  • Medium 6.8
    CVE-2026-20760

    Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring…

    intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  • Medium 6.8
    CVE-2026-20775

    Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. System soft…

  • Medium 5.9
    CVE-2026-20708

    Insertion of sensitive information into log file in the subsystem for the Intel(R) AMT and Intel(R) Standard Manageabil…

  • Medium 5.6
    CVE-2025-31356

    Insufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: …

  • Medium 5.6
    CVE-2026-20734

    Improper initialization in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT), and some Intel(…

  • Medium 4.5
    CVE-2026-20713

    Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalat…

    intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  • Medium 4.0
    CVE-2026-20712

    Incomplete cleanup in some UEFI firmware for some Intel(R) reference platforms within UEFI may allow an information dis…

  • Medium 4.0
    CVE-2026-20901

    Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. St…

    intel-microcode intel-microcode Debian Ubuntu
  • Medium 4.0
    CVE-2026-20917

    Exposure of sensitive information caused by incorrect data forwarding during transient execution for some Intel(R) Proc…

    intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine