Privilege Escalation Vulnerability in microcode_ctl Package
Summary
RLSA-2026:67979: Important: microcode_ctl security, bug fix, and enhancement update. Affects microcode_ctl versions < 4:20260812-0.el10_2. Fixed in 4:20260812-0.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The microcode_ctl package is essential for providing microcode updates for Intel and AMD processors, ensuring optimal performance and security. It plays a critical role in maintaining the integrity of processor operations by applying necessary updates that address bugs and vulnerabilities. However, recent findings have revealed significant security vulnerabilities that could allow unauthorized privilege escalation, particularly affecting Intel processors.
Vulnerability Detail
The vulnerability stems from improper value handling in the hypervisor for Intel processors, which can lead to privilege escalation in Ring 0 (CVE-2025-35973). Additionally, there is a specific issue with Intel Xeon 6 processors where improper memory range handling in System Management Mode (SMM) can also result in privilege escalation (CVE-2025-31936). These vulnerabilities can potentially allow attackers to gain elevated access to system resources, posing serious risks to system security and stability.
How To Fix
Minimum fixed version
4:20260812-0.el10_2
This is the first release that contains the fix.
sudo dnf update microcode_ctlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds have been provided for this vulnerability. The best course of action is to apply the available updates as soon as possible.
Conclusion
In summary, the microcode_ctl package has critical vulnerabilities that could allow privilege escalation on affected Intel processors. It is essential to update to the latest patched version to mitigate these risks. Regular monitoring and updates are crucial for maintaining system security.
See every vulnerability recorded for microcode_ctl →
FAQ
The CVSS score of this vulnerability is 7.2, indicating a high severity level.
The vulnerability primarily affects Intel processors, specifically Intel Xeon 6 processors.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If exploited, this vulnerability could allow attackers to gain elevated privileges, potentially compromising the entire system.
While the primary risk is unauthorized access, it could lead to data loss or corruption if an attacker gains control over the system.
References
Related vulnerabilities
Recent vulnerabilities recorded for microcode_ctl.
