CentOS Linux 8.4 [TuxCare] Security Update: microcode_ctl (CENTOS8.4:CLSA-2026:1789116898)

The CentOS Linux 8.4 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1789116898 advisory. - Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of...

CentOS Linux 8.5 [TuxCare] Security Update: microcode_ctl (CENTOS8.5:CLSA-2026:1789116715)

The CentOS Linux 8.5 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1789116715 advisory. - Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of...

CentOS Linux 8.4 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1754381424)

The CentOS Linux 8.4 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1754381424 advisory. - Uncaught exception in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enab...

CentOS Linux 8.5 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1754381826)

The CentOS Linux 8.5 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1754381826 advisory. - Uncaught exception in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enab...

CentOS Linux 8 [TuxCare] Security Update: microcode_ctl (CENTOS-STREAM8:CLSA-2026:1789117244)

The CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1789117244 advisory. - Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of...

AlmaLinux 9.2 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1757692837)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757692837 advisory. - Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable informatio...

AlmaLinux 9.6 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790091171)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790091171 advisory. - Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation...

Rocky Linux 9.6 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790091171)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790091171 advisory. - Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalati...

AlmaLinux 9.2 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1745052473)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745052473 advisory. - Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation...

CentOS Linux 7 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (CENTOS7:CLSA-2023:1701444720)

The CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2023:1701444720 advisory. - Information exposure through microarchitectural state after transient execution in certain vector execution units for some IntelR...

CVE-2026-20716: Improper Access Control

Improper access control for some IntelR Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...

CVE-2025-35973: Improper Handling of Values

Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur...

CVE-2026-20917: Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable dat...

CVE-2026-20760: Improper Handling of Overlap Between Protected Memory Ranges

Improper handling of overlap between protected memory ranges in some microcode for some IntelR Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resu...

CVE-2025-35979: Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Processors within VMX non-root guest operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a...

CVE-2025-20109: Improper Isolation or Compartmentalization

Improper Isolation or Compartmentalization in the stream cache mechanism for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-20054: Uncaught Exception

Uncaught exception in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20103: Insufficient Resource Pool

Insufficient resource pool in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-45332: Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...