CVE-2023-43758

microcode_ctl: The microcode_ctl packages provide microcode updates for Intel and AMD processors. Bug Fix(es) and Enhancement(s):...

CVE-2023-43758 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2023-43758, released February 12, 2025. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.2
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0028
20th percentile

The microcode_ctl packages provide microcode updates for Intel and AMD processors. Bug Fix(es) and Enhancement(s): * [RHEL 9.5.z] Update Intel CPU microcode to the latest version (JIRA:RHEL-76084) * microcode_ctl: Improper input validation in UEFI firmware [rhel-9.5.z] (JIRA:RHEL-79223) * microcode_ctl: Improper input validation in UEFI firmware [rhel-9.5.z] (JIRA:RHEL-79224) * microcode_ctl: Improper input validation in UEFI firmware CseVariableStorageSmm [rhel-9.5.z] (JIRA:RHEL-79225) * microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware [rhel-9.5.z] (JIRA:RHEL-79237) * microcode_ctl: Improper input validation in UEFI firmware [rhel-9.5.z] (JIRA:RHEL-79241)

Where it's fixed

ProductFixed inFixReleased
Linux
intel-microcode · Debian 12.15 (bookworm) 3.20250211.1~deb12u1 DEBIAN-CVE-2023-43758 Feb 12, 2025
intel-microcode · Debian 13.5 (trixie) 3.20250211.1 DEBIAN-CVE-2023-43758 Feb 12, 2025
intel-microcode · Debian 14 3.20250211.1 DEBIAN-CVE-2023-43758 Feb 12, 2025
microcode_ctl · RHEL 8 4:20250211-1.el8_10 RHEA-2025:3114 Mar 24, 2025
microcode_ctl · RHEL 9 4:20240910-1.20250211.1.el9_5 RHBA-2025:2991 Mar 18, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.