{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "Update Intel CPU microcode to 20250211 release, addresses: CVE-2023-34440,\n CVE-2023-43758, CVE-2024-24582, CVE-2024-28127, CVE-2024-29214\n (INTEL-SA-01139):\n - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at\n revision 0x2c0003e0;\n - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at\n revision 0x2b000620;\n - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat)\n at revision 0x38;\n - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in\n microcode.dat) at revision 0x436;\n - Addition of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) at\n revision 0x3000330;\n - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at\n revision 0x12c;\n - Addition of cpuid:B0674/0x32 microcode (in microcode.dat) at revision\n 0x12c;\n - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in\n microcode.dat) at revision 0x4124;\n - Addition of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) at\n revision 0x1c;\n - Addition of cpuid:B06F6/0x07 microcode (in microcode.dat) at revision 0x38;\n - Addition of cpuid:B06F7/0x07 microcode (in microcode.dat) at revision 0x38;\n - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at\n revision 0x21000291;\n - Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision\n 0x2c000290;\n - Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision\n 0x2c000390;\n - Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at\n revision 0x2b0004d0;\n - Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at\n revision 0x2b0005c0;\n - Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at\n revision 0x2c000290;\n - Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at\n revision 0x2c000390;\n - Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at\n revision 0x2b0004d0;\n - Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at\n revision 0x2b0005c0;\n - Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision\n 0x2c000290;\n - Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision\n 0x2c000390;\n - Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at\n revision 0x2b0004d0;\n - Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at\n revision 0x2b0005c0;\n - Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at\n revision 0x2b0004d0;\n - Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at\n revision 0x2b0005c0;\n - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at\n revision 0x2c000290;\n - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at\n revision 0x2c000390;\n - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at\n revision 0x2b0004d0;\n - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at\n revision 0x2b0005c0;\n - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat)\n at revision 0x35;\n - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in\n microcode.dat) at revision 0x433;\n - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at\n revision 0x123;\n - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in\n microcode.dat) at revision 0x4121;\n - Removal of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) at\n revision 0x4121;\n - Removal of cpuid:B06A8/0xe0 microcode (in microcode.dat) at revision\n 0x4121;\n - Removal of cpuid:B06E0/0x11 (ADL-N A0) microcode (in microcode.dat) at\n revision 0x17;\n - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at\n revision 0x21000230;\n - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from\n revision 0xd0003e7 up to 0xd0003f5;\n - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from\n revision 0x10002b0 up to 0x10002c0;\n - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision\n 0x2c000390 up to 0x2c0003e0;\n - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from\n revision 0x2b0005c0 up to 0x2b000620;\n - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from\n revision 0x2c000390 up to 0x2c0003e0;\n - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from\n revision 0x2b0005c0 up to 0x2b000620;\n - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision\n 0x2c000390 up to 0x2c0003e0;\n - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from\n revision 0x2b0005c0 up to 0x2b000620;\n - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from\n revision 0x2b0005c0 up to 0x2b000620;\n - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from\n revision 0x35 up to 0x38;\n - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from\n revision 0x7 up to 0x9;\n - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from\n revision 0x433 up to 0x436;\n - Update of cpuid:906EA/0x22 (CFL-H/S/Xeon E U0) microcode (in microcode.dat)\n from revision 0xf8 up to 0xfa;\n - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat)\n from revision 0x100 up to 0x102;\n - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from\n revision 0x62 up to 0x63;\n - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from\n revision 0x1e up to 0x20;\n - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from\n revision 0x4121 up to 0x4124;\n - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision\n 0x4121 up to 0x4124;\n - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from\n revision 0x35 up to 0x38;\n - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from\n revision 0x35 up to 0x38;\n - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from\n revision 0x21000230 up to 0x21000291;", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2025/clsa-2025_1745052473.json" }, { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2025:1745052473", "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1745052473" } ], "tracking": { "current_release_date": "2026-02-16T09:19:37Z", "generator": { "date": "2026-02-16T09:19:37Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2025:1745052473", "initial_release_date": "2025-04-19T08:47:55Z", "revision_history": [ { "date": "2025-04-19T08:47:55Z", "number": "1", "summary": "Initial version" }, { "date": "2025-05-19T15:31:58Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-02-16T09:19:37Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "microcode_ctl: Fix of 5 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch", "product": { "name": "microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch", "product_id": "microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/microcode_ctl@20220809-2.20250211.1.el9_2.tuxcare.els1?arch=noarch&epoch=4" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" }, "product_reference": "microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-28127", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-28127" } ], "release_date": "2025-02-12T21:19:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-04-19T08:47:55Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1745052473", "product_ids": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1745052473" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-29214", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-29214" } ], "release_date": "2025-02-12T21:19:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-04-19T08:47:55Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1745052473", "product_ids": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1745052473" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-34440", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-34440" } ], "release_date": "2025-02-12T21:19:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-04-19T08:47:55Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1745052473", "product_ids": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1745052473" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-43758", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-43758" } ], "release_date": "2025-02-12T21:19:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-04-19T08:47:55Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1745052473", "product_ids": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1745052473" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-24582", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation of privilege via local access.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-24582" } ], "release_date": "2025-02-12T21:19:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-04-19T08:47:55Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1745052473", "product_ids": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1745052473" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:microcode_ctl-4:20220809-2.20250211.1.el9_2.tuxcare.els1.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }