Description
Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation of privilege via local access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Intel(R) processors | See references | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | intel-microcode | 3.20250211.1 | — |
| Debian 13 | intel-microcode | 3.20250211.1 | — |
| Debian 12 | intel-microcode | 3.20250211.1~deb12u1 | — |
| Debian 11 | intel-microcode | 3.20250211.1~deb11u1 | DLA-4095-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | microcode_ctl | 4:20240910-1.20250211.1.el9_5 | RHBA-2025:2991 |
| RHEL 8 | microcode_ctl | 4:20250211-1.el8_10 | RHEA-2025:3114 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | microcode_ctl | 4:20230808-2.20250211.1.el9_4 | RHEA-2025:2418 |
| RHEL 9.2 EUS | microcode_ctl | 4:20220809-2.20250211.1.el9_2 | RHEA-2025:2420 |
| RHEL 9.0 E4S | microcode_ctl | 4:20220207-1.20250211.1.el9_0 | RHEA-2025:2419 |
| RHEL 8.8 EUS | microcode_ctl | 4:20220809-2.20250211.1.el8_8 | RHEA-2025:2421 |
| RHEL 8.6 TUS | microcode_ctl | 4:20220207-1.20250211.1.el8_6 | RHEA-2025:2422 |
| RHEL 8.6 E4S | microcode_ctl | 4:20220207-1.20250211.1.el8_6 | RHEA-2025:2422 |
| RHEL 8.6 AUS | microcode_ctl | 4:20220207-1.20250211.1.el8_6 | RHEA-2025:2422 |
| RHEL 8.4 TUS | microcode_ctl | 4:20210216-1.20250211.1.el8_4 | RHEA-2025:2423 |
| RHEL 8.4 E4S | microcode_ctl | 4:20210216-1.20250211.1.el8_4 | RHEA-2025:2423 |
| RHEL 8.4 AUS | microcode_ctl | 4:20210216-1.20250211.1.el8_4 | RHEA-2025:2423 |
| RHEL 8.2 AUS | microcode_ctl | 4:20191115-4.20250211.1.el8_2 | RHEA-2025:2424 |
| RHEL 7.7 AUS | microcode_ctl | 2:2.1-53.25.el7_7.1 | RHBA-2025:2428 |
| RHEL 7 ELS | microcode_ctl | 2:2.1-73.23.el7_9 | RHEA-2025:2427 |
Advisories 13
- RHEA-2025:3114 Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHEA-2025:2427 Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHEA-2025:2424 Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHEA-2025:2422 Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHEA-2025:2423 Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHEA-2025:2421 Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHEA-2025:2420 Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHEA-2025:2418 Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHEA-2025:2419 Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHBA-2025:2428 Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHBA-2025:2991 Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- WID-SEC-2025-0323 Intel Firmware: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 5, 2026
- DLA-4095-1 intel-microcode - security update Debian Security (DSA / DLA) · Mar 9, 2026