Skip to content
OpenAdvisories
High ELSA-2026-67979 2 CVEs

Important: microcode_ctl security, bug fix, and enhancement update (Oracle Linux 10)

Published Oct 13, 2026 · Updated Oct 13, 2026

Summary

[20260812-1.0.2]
- disable late update for 06-ad-01

[20260812-1.0.1]
- enable use with ueknext and UEK8 kernels
- don't bother calling dracut if virtualized
- ensure UEK also rebuilds initramfs
- enable early update for 06-4f-01
- enable early and late load on RHCK

[4:20260812-1]
- Update Intel CPU microcode to microcode-20260812 release (RHEL-240772)
- Security advisories:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html
CVE-2025-31936
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01404.html
CVE-2025-31938
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01423.html
CVE-2026-20917
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01428.html
CVE-2025-35973
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01435.html
CVE-2026-20716
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01441.html
CVE-2026-20760
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.html
CVE-2026-20713, CVE-2026-20901
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01443.html
CVE-2026-20707
- New microcode files (in hex):
06-b7-04: Raptor Lake: revision 0137
06-cc-02: Panther Lake: revision 011c
06-cc-03: Panther Lake: revision 011c
06-d5-01: Wildcat Lake: revision 000c
06-d7-00: Bartlett Lake: revision 0137
- Microcode files (/platform_mask shown) with revision updates (in hex):
06-6a-06/87: Ice Lake-X: d000421 to d000433
06-6c-01/10: Ice Lake-D: 10002f1 to 1000301
06-7e-05/80: Ice Lake-L: 00cc to 00ce
06-8f-07/87: Sapphire Rapids: 2b000661 to 2b000685
06-8f-08/10: Sapphire Rapids with HBM: 2c000421 to 2c000435
06-8f-08/87: Sapphire Rapids: 2b000661 to 2b000685
06-a7-01/02: Rocket Lake: 0065 to 0066
06-ad-01/20: Granite Rapids-X: a000133 to a000151
06-ad-01/95: Granite Rapids-X: 1000405 to 1000434
06-ae-01/97: Granite Rapids-D: 10002f3 to 1000309
06-af-03/01: Crestmont (Sierra Forest): 3000382 to 30003b2
06-b5-00/80: Arrow Lake-U: 000d to 000e
06-b7-01/36: Raptor Lake: 0133 to 0137, platform bit 04 added
06-bd-01/80: Lunar Lake: 0125 to 0128
06-c5-02/82: Arrow Lake-H: 011b to 0122
06-c6-02/82: Arrow Lake: 011b to 0122
06-cf-02/87: Emerald Rapids: 210002d3 to 210002f4

[4:20260210-1]
- Update Intel CPU microcode to microcode-20260210 release (RHEL-150997)
- Microcode files (/platform_mask shown) with revision updates (in hex):
06-6a-06/87: Ice Lake-X: d000410 to d000421
06-6c-01/10: Ice Lake-D: 10002e0 to 10002f1
06-7e-05/80: Ice Lake-L: 00ca to 00cc
06-8c-01/80: Tiger Lake: 00bc to 00be
06-8c-02/c2: Tiger Lake: 003c to 003e
06-8d-01/c2: Tiger Lake-H: 0056 to 0058
06-8f-07/87: Sapphire Rapids: 2b000650 to 2b000661
06-8f-08/10: Sapphire Rapids with HBM: 2c000410 to 2c000421
06-8f-08/87: Sapphire Rapids: 2b000650 to 2b000661
06-97-02/07: Alder Lake: 003d to 003e
06-97-05/07: Alder Lake: 003d to 003e
06-9a-03/80: Alder Lake-L: 043a to 043b
06-9a-04/80: Alder Lake-L: 043a to 043b
06-9a-04/40: Arizona Beach (Atom C11xx): 000b to 000c
06-9a-04/80: Alder Lake-L: 043a to 043b
06-a7-01/02: Rocket Lake: 0064 to 0065
06-aa-04/e6: Meteor Lake-L: 0025 to 0028
06-ad-01/20: Granite Rapids-X: a000124 to a000133
06-ad-01/95: Granite Rapids-X: 10003f0 to 1000405
06-ae-01/97: Granite Rapids-D: 1000273 to 10002f3
06-b5-00/80: Arrow Lake-U: 000a to 000d
06-b7-01/32: Raptor Lake: 0132 to 0133
06-ba-02/e0: Raptor Lake-P: 6133 to 6134
06-ba-03/e0: Raptor Lake-P: 6133 to 6134
06-be-00/19: Gracemont (Alder Lake-N): 001e to 0021
06-bf-02/07: Raptor Lake-S: 003d to 003e
06-bf-05/07: Raptor Lake-S: 003d to 003e
06-c5-02/82: Arrow Lake-H: 011a to 011b
06-c6-02/82: Arrow Lake: 011a to 011b
06-cf-02/87: Emerald Rapids: 210002c0 to 210002d3
Resolves: RHEL-150997

[4:20251111-1]
- Fix typo in /usr/share/microcode_ctl/ucode_with_caveats/intel-06-8f-08/config
(RHEL-123517)
- Update Intel CPU microcode to microcode-20251111 release (RHEL-128195)
- Addition of 06-ae-01/0x97 microcode at revision 0x1000273;
- Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
- Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
- Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
- Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
0x2b000643 up to 0x2b000650;
- Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
- Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
revision 0x2c000401 up to 0x2c000410;
- Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
- Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
intel-ucode/06-8f-08) from revision 0x2c000401 up to 0x2c000410;
- Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
- Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
revision 0x2c000401 up to 0x2c000410;
- Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
- Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
- Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
0x2c000401 up to 0x2c000410;
- Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
0x2b000643 up to 0x2b000650;
- Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
0x3a up to 0x3d;
- Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
intel-ucode/06-97-02) from revision 0x3a up to 0x3d;
- Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
from revision 0x3a up to 0x3d;
- Update of 06-

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 10 microcode_ctl 4:20260812-1.0.2.el10_2

Vulnerabilities 2