microcode_ctl (AlmaLinux:9) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:9 package microcode_ctl, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (10)

• CVE-2023-39368 — CVSS 6.5 (medium): Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable…
• CVE-2023-28746 — CVSS 6.5 (medium): Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R)…
• CVE-2024-39279 — CVSS 6.5 (medium): Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially…
• CVE-2023-22655 — CVSS 6.1 (medium): Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a…
• CVE-2023-38575 — CVSS 5.5 (medium): Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to…
• CVE-2023-43490 — CVSS 5.3 (medium): Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allow a privileged user to…
• CVE-2024-28047 — CVSS 5.3 (medium): Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information…
• CVE-2024-31157 — CVSS 5.3 (medium): Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable…
• CVE-2023-46103 — CVSS 4.7 (medium): Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to…
• CVE-2023-45733 — CVSS 2.8 (low): Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial…