RHSA-2025:7043MediumCVSS 6.5
Red Hat Security Advisory: microcode_ctl security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2024-28047 — microcode_ctl: Improper input validation in UEFI firmware CVE-2024-31157 — microcode_ctl: Improper initialization in UEFI firmware OutOfBandXML module CVE-2024-39279 — microcode_ctl: Insufficient granularity of access control in UEFI firmware
🎯 Affected products3
- Red Hat Enterprise Linux BaseOS (v. 9)
- microcode_ctl-4:20250211-1.el9_6.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 9)
- microcode_ctl-4:20250211-1.el9_6.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2025:7043
- externalhttps://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2345363
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2345381
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2345421
- externalhttps://issues.redhat.com/browse/RHEL-67336
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7043.json