[Apollo] Advisories Statistics light light Login

RLSA-2025:7043

Security Mirrored from RHSA-2025:7043
Issued at: 2025-10-04
Updated at: 2025-10-10

Synopsis

Moderate: microcode_ctl security update



Description

The microcode_ctl packages provide microcode updates for Intel and AMD processors.

Security Fix(es):

* microcode_ctl: Improper input validation in UEFI firmware (CVE-2024-28047)

* microcode_ctl: Insufficient granularity of access control in UEFI firmware (CVE-2024-39279)

* microcode_ctl: mproper initialization in UEFI firmware OutOfBandXML module (CVE-2024-31157)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.



Affected products

Rocky Linux 9.6 aarch64 Rocky Linux 9.6 ppc64le Rocky Linux 9.6 s390x Rocky Linux 9.6 x86_64

Fixes

2345363 2345381 2345421

CVEs

CVE-2024-28047 CVE-2024-31157 CVE-2024-39279

Affected packages

Rocky Linux 9.6 x86_64 - BaseOS

microcode_ctl-4:20250211-1.el9_6.noarch.rpm microcode_ctl-4:20250211-1.el9_6.src.rpm

Rocky Linux 9.6 aarch64 - BaseOS

microcode_ctl-4:20250211-1.el9_6.src.rpm

Rocky Linux 9.6 ppc64le - BaseOS

microcode_ctl-4:20250211-1.el9_6.src.rpm

Rocky Linux 9.6 s390x - BaseOS

microcode_ctl-4:20250211-1.el9_6.src.rpm