Critical Security Advisory for microcode_ctl: Vulnerability and Fix Overview
Summary
RHSA-2026:68011: Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update. Affects microcode_ctl versions < 4:20260210-1.20260812.1.el9_8. Fixed in 4:20260210-1.20260812.1.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The microcode_ctl package is an essential component of the Red Hat Enterprise Linux ecosystem, responsible for loading microcode updates to the CPU. These updates are crucial for maintaining system stability and security, as they can address bugs and vulnerabilities at the processor level. Given the critical nature of this package, any vulnerabilities can have significant implications for system integrity and security.
Vulnerability Detail
The vulnerabilities identified as CVE-2025-31936 and CVE-2025-35973 affect the microcode_ctl package, allowing potential attackers to exploit weaknesses in CPU microcode handling. These vulnerabilities could lead to unauthorized access, data leakage, or system crashes, posing a severe risk to affected systems. The vulnerabilities stem from improper handling of microcode updates, which could allow an attacker with local access to escalate privileges or execute arbitrary code.
How To Fix
Minimum fixed version
4:20260210-1.20260812.1.el9_8
This is the first release that contains the fix.
sudo dnf update microcode_ctlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected systems and monitor for any unusual activity until the package is updated. Additionally, consider implementing strict user permissions to minimize the risk of exploitation.
Conclusion
In summary, the microcode_ctl package has critical vulnerabilities that require immediate attention. Updating to the latest patched version is essential to safeguard your systems against potential exploits. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for microcode_ctl →
FAQ
The CVSS score for this vulnerability is 7.2, indicating a high severity level.
You can use Vulert, which allows you to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without any signup.
Failure to address this vulnerability could lead to unauthorized access, data breaches, and system instability, significantly compromising the security of your systems.
Yes, you should upgrade to version 4:20260210-1.20260812.1.el9_8 to mitigate the vulnerabilities.
If immediate updates are not possible, implement strict access controls and monitor system activity closely to mitigate potential risks.
Related vulnerabilities
Recent vulnerabilities recorded for microcode_ctl.
