RHEA-2025:3114HighCVSS 8.2

Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

Published
March 24, 2025
Last Modified
June 26, 2026

🔗 CVE IDs covered (10)

CVE-2024-31068 →CVE-2024-39279 →CVE-2024-29214 →CVE-2024-31157 →CVE-2024-36293 →CVE-2023-34440 →CVE-2023-43758 →CVE-2024-24582 →CVE-2024-28047 →CVE-2024-28127 →

📋 Description

CVE-2023-34440 — microcode_ctl: Improper input validation in UEFI firmware CVE-2023-43758 — microcode_ctl: Improper input validation in UEFI firmware CVE-2024-24582 — microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware CVE-2024-28047 — microcode_ctl: Improper input validation in UEFI firmware CVE-2024-28127 — microcode_ctl: Improper input validation in UEFI firmware CVE-2024-29214 — microcode_ctl: Improper input validation in UEFI firmware CseVariableStorageSmm CVE-2024-31068 — kernel: microcode_ctl: From CVEorg collector CVE-2024-31157 — microcode_ctl: Improper initialization in UEFI firmware OutOfBandXML module CVE-2024-36293 — kernel: microcode_ctl: From CVEorg collector CVE-2024-39279 — microcode_ctl: Insufficient granularity of access control in UEFI firmware

🔗 References (3)