Skip to content
OpenAdvisories
High · 8.2 CVE-2023-43758 EUVD-2023-48135GHSA-648v-44jr-95mp

Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of pri…

Published Feb 12, 2025 · Updated Nov 3, 2025 · Assigned by intel

Description

Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffectedFixed
— Intel(R) processors See references —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 intel-microcode 3.20250211.1 —
Debian 13 intel-microcode 3.20250211.1 —
Debian 12 intel-microcode 3.20250211.1~deb12u1 —
Debian 11 intel-microcode 3.20250211.1~deb11u1 DLA-4095-1
ReleasePackageFixed inAdvisory
RHEL 9 microcode_ctl 4:20240910-1.20250211.1.el9_5 RHBA-2025:2991
RHEL 8 microcode_ctl 4:20250211-1.el8_10 RHEA-2025:3114
Show 13 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.4 EUS microcode_ctl 4:20230808-2.20250211.1.el9_4 RHEA-2025:2418
RHEL 9.2 EUS microcode_ctl 4:20220809-2.20250211.1.el9_2 RHEA-2025:2420
RHEL 9.0 E4S microcode_ctl 4:20220207-1.20250211.1.el9_0 RHEA-2025:2419
RHEL 8.8 EUS microcode_ctl 4:20220809-2.20250211.1.el8_8 RHEA-2025:2421
RHEL 8.6 TUS microcode_ctl 4:20220207-1.20250211.1.el8_6 RHEA-2025:2422
RHEL 8.6 E4S microcode_ctl 4:20220207-1.20250211.1.el8_6 RHEA-2025:2422
RHEL 8.6 AUS microcode_ctl 4:20220207-1.20250211.1.el8_6 RHEA-2025:2422
RHEL 8.4 TUS microcode_ctl 4:20210216-1.20250211.1.el8_4 RHEA-2025:2423
RHEL 8.4 E4S microcode_ctl 4:20210216-1.20250211.1.el8_4 RHEA-2025:2423
RHEL 8.4 AUS microcode_ctl 4:20210216-1.20250211.1.el8_4 RHEA-2025:2423
RHEL 8.2 AUS microcode_ctl 4:20191115-4.20250211.1.el8_2 RHEA-2025:2424
RHEL 7.7 AUS microcode_ctl 2:2.1-53.25.el7_7.1 RHBA-2025:2428
RHEL 7 ELS microcode_ctl 2:2.1-73.23.el7_9 RHEA-2025:2427
ReleasePackageFixed inAdvisory
Alpine v3.24 intel-ucode 20250211-r0 —
Alpine v3.23 intel-ucode 20250211-r0 —
Alpine v3.22 intel-ucode 20250211-r0 —
Alpine v3.21 intel-ucode 20250211-r0 —
Alpine v3.20 intel-ucode 20250211-r0 —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 intel-ucode 20250211-r0 —
Alpine v3.18 intel-ucode 20250211-r0 —

Advisories 13

References