MiracleLinux 9 : microcode_ctl-20250211-1.el9_6 (AXSA:2025-10063:04)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-10063:04 advisory. microcodectl: Improper input validation in UEFI firmware CVE-2024-28047 microcodectl: Insufficient granularity of access control in UEFI firmware...

microcode_ctl security update

An update is available for microcodectl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

Linux Distros Unpatched Vulnerability : CVE-2024-28047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

BELL-CVE-2024-28047

Bulletin has no description...

CVE-2024-28047

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-28047

creationtimestamp| type| source ---|---|--- 2025-02-12 22:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz77ymiov2h 2025-02-12 22:28:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113993271849795056 2025-08-26 13:26:34+00:00| seen|...

CVE-2024-28047

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-28047

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-28047

CVE-2024-28047 concerns improper input validation in UEFI firmware for some Intel processors, enabling a privileged local user to potentially disclose information. Multiple connected sources confirm the root cause is UEFI input validation weakness and the impact is information disclosure via loca...

CVE-2024-28047

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-28047

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-28047

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...