Critical Privilege Escalation Vulnerability in microcode_ctl Package
Summary
RLSA-2026:65147: Important: microcode_ctl security, bug fix, and enhancement update. Affects microcode_ctl versions < 4:20260812-1.el8_10. Fixed in 4:20260812-1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The microcode_ctl package is essential for providing microcode updates for Intel and AMD processors, ensuring that the CPUs operate efficiently and securely. It plays a crucial role in maintaining system stability and performance by applying necessary updates to the processor's firmware. However, vulnerabilities in this package can lead to severe security risks, including privilege escalation, which can compromise the entire system.
Vulnerability Detail
The vulnerability stems from improper value handling in the hypervisor for Intel processors, which allows for privilege escalation in Ring 0. Additionally, there is a specific issue with Intel Xeon 6 processors where improper memory range handling in System Management Mode (SMM) can also lead to privilege escalation. These vulnerabilities can allow an attacker to gain elevated privileges, potentially leading to unauthorized access to sensitive data and system control.
How To Fix
Minimum fixed version
4:20260812-1.el8_10
This is the first release that contains the fix.
sudo dnf update microcode_ctlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is strongly advised to apply the available updates as soon as possible to mitigate the risks associated with these vulnerabilities.
Conclusion
The microcode_ctl package has critical vulnerabilities that can lead to privilege escalation on affected systems. It is imperative to update the package to the latest version to mitigate these risks. Regular monitoring and updates are essential to maintain system security.
See every vulnerability recorded for microcode_ctl →
FAQ
The CVSS score of this vulnerability is 7.2, indicating a high severity level.
The vulnerability affects systems running the microcode_ctl package on Rocky Linux 8, particularly those utilizing Intel Xeon 6 processors.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
If exploited, this vulnerability can lead to privilege escalation, allowing attackers to gain unauthorized access to sensitive data and control over the system.
While the primary risk is unauthorized access and control, there is a potential for data loss if an attacker exploits the vulnerability to manipulate or delete data.
References
Related vulnerabilities
Recent vulnerabilities recorded for microcode_ctl.
