{
  "cveId": "CVE-2026-20712",
  "url": "https://patchblox.com/security/cve/CVE-2026-20712",
  "summary": "CVE-2026-20712 is fixed in microcode_ctl on 1 platform, first by ELSA-2026-500239, released September 16, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "microcode_ctl: [4:20260812-1.0.3]\n- disable late update for 06-ad-01\n- add support for UEK7/UEK8 and ueknext kernels\n- don\u0027t bother...",
  "description": "[4:20260812-1.0.3]\n- disable late update for 06-ad-01\n- add support for UEK7/UEK8 and ueknext kernels\n- don\u0027t bother calling dracut if virtualized [Orabug: 35710077]\n- ensure UEK also rebuilds initramfs [Orabug: 34280058]\n- add support for UEK7 kernels\n- enable early update for 06-4f-01\n- remove no longer appropriate caveats for 06-2d-07 and 06-55-04\n- enable early and late load on RHCK\n\n[4:20260812-1]\n- Update Intel CPU microcode to microcode-20260812 release (RHEL-240770)\n- Security advisories:\n  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html\n  CVE-2025-31936\n  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01404.html\n  CVE-2025-31938\n  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01423.html\n  CVE-2026-20917\n  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01428.html\n  CVE-2025-35973\n  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01435.html\n  CVE-2026-20716\n  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01441.html\n  CVE-2026-20760\n  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.html\n  CVE-2026-20713, CVE-2026-20901\n  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01443.html\n  CVE-2026-20707\n- New microcode files (in hex):\n  06-b7-04: Raptor Lake: revision 0137\n  06-d5-01: Wildcat Lake: revision 000c\n  06-d7-00: Bartlett Lake: revision 0137\n- Microcode files (/platform_mask shown) with revision updates (in hex):\n  06-6a-06/87: Ice Lake-X: d000421 to d000433\n  06-6c-01/10: Ice Lake-D: 10002f1 to 1000301\n  06-7e-05/80: Ice Lake-L: 00cc to 00ce\n  06-8f-07/87: Sapphire Rapids: 2b000670 to 2b000685\n  06-8f-08/10: Sapphire Rapids with HBM: 2c000421 to 2c000435\n  06-8f-08/87: Sapphire Rapids: 2b000670 to 2b000685\n  06-a7-01/02: Rocket Lake: 0065 to 0066\n  06-ad-01/20: Granite Rapids-X: a000142 to a000151\n  06-ad-01/95: Granite Rapids-X: 1000423 to 1000434\n  06-ae-01/97: Granite Rapids-D: 1000307 to 1000309\n  06-af-03/01: Crestmont (Sierra Forest): 30003a3 to 30003b2\n  06-b5-00/80: Arrow Lake-U: 000d to 000e\n  06-b7-01/36: Raptor Lake: 0133 to 0137, platform bit 04 added\n  06-bd-01/80: Lunar Lake: 0126 to 0128\n  06-c5-02/82: Arrow Lake-H: 0121 to 0122\n  06-c6-02/82: Arrow Lake: 0121 to 0122\n  06-cc-02/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02\n  06-cc-03/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02\n  06-cf-02/87: Emerald Rapids: 210002e0 to 210002f4\nResolves: RHEL-240770",
  "published": "2026-09-16T00:00:00Z",
  "severity": "IMPORTANT",
  "cvss": 6,
  "epss": 0.0016,
  "epssPercentile": 0.0519,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "microcode_ctl",
      "release": "ol 10",
      "fixedVersion": "4:20260812-1.0.2.el9_8",
      "fix": "ELSA-2026-500239",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500239",
      "released": "2026-09-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "microcode_ctl",
      "release": "ol 8",
      "fixedVersion": "4:20260812-1.0.2.el9_8",
      "fix": "ELSA-2026-500239",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500239",
      "released": "2026-09-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "microcode_ctl",
      "release": "ol 9",
      "fixedVersion": "4:20260812-1.0.2.el9_8",
      "fix": "ELSA-2026-500239",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500239",
      "released": "2026-09-16T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}