Red Hat Security AdvisoryRHSA-2025:7043
microcode_ctl security update
Released 2025-05-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 9) microcode_ctl-4:20250211-1.el9_6
Fixes 3 records
Priority LOW 30
Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
CVSS 4.0MEDIUM 6.8· Local · High privileges · No interaction · EPSS 0.00234 · Published 2025-02-12 · Partial fix CWE-665
Priority LOW 30
Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
CVSS 4.0MEDIUM 6.8· Local · High privileges · No interaction · EPSS 0.0025 · Published 2025-02-12 · Partial fix CWE-20
Priority LOW 29
Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access.
CVSS 4.0MEDIUM 6.8· Local · Low privileges · No interaction · EPSS 0.00216 · Published 2025-02-12 · Partial fix CWE-1220
