CLSA-2025-1747726439 Update of microcode_ctl

Update Intel CPU microcode to 20250211: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003e0; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000620; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...

CVE-2025-20004

Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access...

SUSE CVE-2025-20012

Incorrect behavior order for some IntelR Coretm Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2024-45332

CVE-2024-45332 details (normal mode) The exposure concerns Intel processors where shared microarchitectural predictor state influences transient execution in indirect branch predictors, enabling potential information disclosure via local access. Affected: Intel CPUs with the relevant microarchite...

CVE-2025-20054

Uncaught exception in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

HPESBHF04858 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Synergy, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01244, 2025.2 IPU, Intel Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen11 - Prior to v2.5004-22-2025 HPE ProLiant DL320 Gen11 Server - Prior to v2.5004-22-2025 HPE ProLiant DL360 Gen11 Server - Prior to v2.5004-22-2025 HPE...

2025.2 IPU, Intel® Processor Advisory

Summary: Potential security vulnerabilities in some Intel® Processors may allow denial of service. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20103 Description: Insufficient resource pool in the core management mechanis...

2025.1 IPU -Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing microcode updates and prescriptive guidance to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28956 Description: Exposure of Sensitive...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-068)

The version of kernel installed on the remote host is prior to 5.15.57-29.131. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-068 advisory. A flaw was found in hw. Aliases in the branch predictor may cause some AMD processors to predict the wrong...

Important: Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: microcodectl: Improper input validation in UEFI firmware CseVariableStorageSmm...

Important: Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: microcodectl: Improper input validation in UEFI firmware JIRA:RHEL-79234...

Linux Distros Unpatched Vulnerability : CVE-2022-0001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information...

The vulnerabilities of Intel System Resources Defense and Intel System Security Report, microprogramming software for Intel processors, allow attackers to enhance their privileges.

The vulnerabilities of Intel System Resources Defense and Intel System Security software related to Intel processor microsoftware are associated with synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to gain increased privileges...

The vulnerabilities of Intel System Resources Defense and Intel System Security Report, microprogramming software for Intel processors, allow attackers to enhance their privileges.

The vulnerabilities of Intel System Resources Defense and Intel System Security software related to Intel processor microsoftware are associated with insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

Linux Distros Unpatched Vulnerability : CVE-2022-38090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable...

Linux Distros Unpatched Vulnerability : CVE-2022-21151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Processor optimization removal or modification of security-critical code for some IntelR Processors may allow an authenticated user to potentially enable...

Linux Distros Unpatched Vulnerability : CVE-2022-28693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unprotected alternative channel of return branch target prediction in some IntelR Processors may allow an authorized user to potentially enable information...

Linux Distros Unpatched Vulnerability : CVE-2019-0154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient access control in subsystem for Intel R processor graphics in 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families; IntelR PentiumR...

Linux Distros Unpatched Vulnerability : CVE-2012-0217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and...

UBUNTU-CVE-2022-49565

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/lbr: Fix unchecked MSR access error on HSW The fuzzer triggers the below trace. 7763.384369 unchecked MSR access error: WRMSR to 0x689 tried to write 0x1fffffff8101349e at rIP: 0xffffffff810704a4...