Red Hat Security Advisory: microcode_ctl security update

Fixed packages 1

Vulnerabilities 3

• Medium 6.5
  CVE-2024-39279

  Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user …

  intel-microcode intel-microcode Debian Ubuntu
  Feb 12, 2025
• Medium 5.3
  CVE-2024-28047

  Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enab…

  intel-microcode Debian
  Feb 12, 2025
• Medium 5.3
  CVE-2024-31157

  Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to…

  intel-microcode Debian
  Feb 12, 2025

References

• article
  https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index
• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2345363
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2345381
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2345421
• article
  https://issues.redhat.com/browse/RHEL-67336
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7043.json
• report
  https://access.redhat.com/security/cve/CVE-2024-28047
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-28047
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-28047
• article
  https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html
• report
  https://access.redhat.com/security/cve/CVE-2024-31157
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-31157
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-31157
• report
  https://access.redhat.com/security/cve/CVE-2024-39279
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-39279
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-39279