2025.2 IPU, Intel® Processor Stream Cache Advisory

Summary: A potential security vulnerability in some Intel® Processor stream cache mechanisms may allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20109 Description: Improper Isolation or...

HPESBHF04929 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01245, 2025.2 IPU - Intel TDX Module Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to 2.5004-22-2025 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to 2.5004-22-2025 U63 ROM Family HPE StoreEasy 1570 Performance -...

Linux Distros Unpatched Vulnerability : CVE-2024-28956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some IntelR Processors may allow an authenticated user ...

HPESBHF04922 rev.1 - Certain HPE ProLiant DL/ML/XD Servers Using Certain Intel Processors, INTEL-SA-01311, Intel Xeon 6 Processor with Intel TDX Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 - Prior to 1.4005-22-2025 HPE ProLiant Compute DL340 Gen12 - Prior to 1.4005-22-2025 HPE ProLiant Compute DL360 Gen12 - Prior to 1.4005-22-202...

Linux Distros Unpatched Vulnerability : CVE-2020-0543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially enable information...

CLSA-2025-1754381424 microcode_ctl: Fix of 8 CVEs

Update Intel CPU microcode to 20250512 release, addresses CVE-2025-20012, CVE-2025-24495, CVE-2024-43420, CVE-2025-20623, CVE-2024-45332, CVE-2024-28956, CVE-2025-20103, CVE-2025-20054: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003f7; - Addition of...

[Important] [Security] CVE Fixes (CVE-2025-32462, CVE-2024-12085, and CVE-2024-45332) for Virtuozzo Hybrid Server 7.5 and VzLinux 7.9

This update fixes the vulnerabilities in sudo, rsync, and microcodectl registered as CVE-2025-32462, CVE-2024-12085, and CVE-2024-45332. Additionally, this update includes fixes applied to Virtuozzo guest tools for Windows. The new packages are available for Virtuozzo Hybrid Server 7.5 and VzLinu...

RLSA-2025:10991 Moderate: microcode_ctl security update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: microcodectl: From CVEorg collector CVE-2024-28956 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pag...

microcode_ctl security update

An update is available for microcodectl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

NewStart CGSL MAIN 7.02 : microcode_ctl Multiple Vulnerabilities (NS-SA-2025-0137)

The remote NewStart CGSL host, running version MAIN 7.02, has microcodectl packages installed that are affected by multiple vulnerabilities: - Information exposure through microarchitectural state after transient execution in certain vector execution units for some IntelR Processors may allow an...

Alibaba Cloud Linux 3 : 0115: microcode_ctl (ALINUX3-SA-2025:0115)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0115 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-28956: Exposure of Sensitive...

Moderate: Red Hat Security Advisory: microcode_ctl security update

An update for microcodectl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

microcode_ctl: Exposure of sensitive information

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Moderate: microcode_ctl security update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: microcodectl: From CVEorg collector CVE-2024-28956 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pag...

ALSA-2025:10991 Moderate: microcode_ctl security update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: microcodectl: From CVEorg collector CVE-2024-28956 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pag...

HPESBHF04814 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01139, 2025.1 IPU - UEFI Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to HPE SimpliVity Support Pack Gen10 SVTSPGen10 v20250630 HPE SimpliVity 380 Gen10 Plus - Prior to HPE SimpliVity...

microcode_ctl: Exposure of sensitive information

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Moderate: Red Hat Security Advisory: microcode_ctl security update

An update for microcodectl is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update...

microcode_ctl: Exposure of sensitive information

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

microcode_ctl: From CVEorg collector

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...