Red Hat Security AdvisoryRHSA-2025:10991
microcode_ctl security update
Released 2025-07-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) microcode_ctl-4:20250512-1.el8_10
Fixes 6 records
Priority LOW 29
Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS 4.0MEDIUM 6.8· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2025-05-13 · Partial fix CWE-1419
Priority LOW 26
Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local acc…
CVSS 4.0MEDIUM 5.7· Local · Low privileges · No interaction · EPSS 0.00426 · Published 2025-05-13 · Partial fix CWE-1421
Priority LOW 25
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core™ processors (10th Generation) may allow an authenticated user to potentiall…
CVSS 4.0MEDIUM 5.7· Local · Low privileges · No interaction · EPSS 0.00204 · Published 2025-05-13 · Partial fix CWE-1423
Priority LOW 25
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to…
CVSS 4.0MEDIUM 5.7· Local · Low privileges · No interaction · EPSS 0.00266 · Published 2025-05-13 · Partial fix CWE-1423
Priority LOW 25
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable informatio…
CVSS 4.0MEDIUM 5.7· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2025-05-13 · Partial fix CWE-1423
Priority LOW 19
Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVSS 4.0MEDIUM 4.1· Physical · No auth · No interaction · EPSS 0.00257 · Published 2025-05-13 · Partial fix CWE-696