Linux · Security advisory · November 12, 2024

ALSA-2024:9401: microcode_ctl security update

ALSA-2024:9401, released November 12, 2024, fixes 7 CVEs in microcode_ctl (version 4:20240910-1.el9_5). None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0076
55th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 0 Routine 7

Fixed package versions

ProductReleaseFixed in
microcode_ctlalmalinux 94:20240910-1.el9_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2023-39368 microcode_ctl: The microcode_ctl packages provide microcode updates for Intel and AMD processors. Security Fix(es): * kernel: loca... 6.5 0.0076 None reported
Routine CVE-2023-28746 Intel: CVE-2023-28746 Register File Data Sampling (RFDS) 6.5 0.0055 Exploitation Less Likely
Routine CVE-2023-46103 ucode-intel: This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20240514 release (bsc... 4.7 0.0028 None reported
Routine CVE-2023-38575 microcode_ctl: The microcode_ctl packages provide microcode updates for Intel and AMD processors. Security Fix(es): * kernel: loca... 5.5 0.0027 None reported
Routine CVE-2023-22655 microcode_ctl: The microcode_ctl packages provide microcode updates for Intel and AMD processors. Security Fix(es): * kernel: loca... 6.1 0.0025 None reported
Routine CVE-2023-43490 intel-microcode: Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allo... 5.3 0.0023 None reported
Routine CVE-2023-45733 ucode-intel: This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20240514 release (bsc... 2.8 0.0018 None reported
Showing 1 to 7 of 7 1