{"id":"CVE-2023-43758","aliases":["ALPINE-CVE-2023-43758","BELL-CVE-2023-43758","CLSA-2025-1745052473","DEBIAN-CVE-2023-43758","DLA-4095-1","EUVD-2023-48135","GHSA-648v-44jr-95mp","MGASA-2025-0068","OESA-2025-1171","RHBA-2025:2428","RHBA-2025:2991","RHEA-2025:2418","RHEA-2025:2419","RHEA-2025:2420","RHEA-2025:2421","RHEA-2025:2422","RHEA-2025:2423","RHEA-2025:2424","RHEA-2025:2427","RHEA-2025:3114","UBUNTU-CVE-2023-43758"],"status":"published","title":"Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged...","description":"Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00277,"percentile":0.20411,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2025-02-12T21:19:24Z","modified":"2026-10-26T18:02:06Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"intel-ucode","fixed_in":["20250211-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"intel-ucode","fixed_in":["20250211-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"intel-ucode","fixed_in":["20250211-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"intel-ucode","fixed_in":["20250211-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"intel-ucode","fixed_in":["20250211-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"intel-ucode","fixed_in":["20250211-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"intel-ucode","fixed_in":["20250211-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"intel-ucode","fixed_in":["20250211-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"intel-ucode","fixed_in":["20250211-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"intel-microcode","fixed_in":["3.20250211.1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"intel-microcode","fixed_in":["3.20250211.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"intel-microcode","fixed_in":["3.20250211.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250211-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250211-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250211-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250211-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250211-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250211-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250211-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20230516a-r0"},{"fixed":"20250211-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"intel-ucode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20230214-r0"},{"fixed":"20250211-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20220809-2.20250211.1.el9_2.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20250211.1~deb12u1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1","3.20180807a.1~deb9u1","3.20180807a.2","3.20180807a.2~bpo8+1","3.20180807a.2~bpo9+1","3.20180807a.2~deb9u1","3.20190312.1","3.20190312.1~bpo9+1","3.20190514.1","3.20190514.1~deb8u1","3.20190514.1~deb9u1","3.20190618.1","3.20190618.1~deb8u1","3.20190618.1~deb9u1","3.20190918.1","3.20191112.1","3.20191112.1~deb10u1","3.20191112.1~deb9u1","3.20191113.1","3.20191115.1","3.20191115.1~deb10u1","3.20191115.1~deb9u1","3.20191115.2","3.20191115.2~deb10u1","3.20191115.2~deb8u1","3.20191115.2~deb9u1","3.20200508.1","3.20200520.1","3.20200609.1","3.20200609.1~deb10u1","3.20200609.1~deb9u1","3.20200609.2","3.20200609.2~deb10u1","3.20200609.2~deb8u1","3.20200609.2~deb9u1","3.20200616.1","3.20200616.1~deb10u1","3.20200616.1~deb9u1","3.20201110.1","3.20201118.1","3.20201118.1~bpo10+1","3.20201118.1~deb10u1","3.20201118.1~deb9u1","3.20210216.1","3.20210216.1~deb10u1","3.20210608.1","3.20210608.2","3.20210608.2~deb10u1","3.20210608.2~deb9u2","3.20220207.1","3.20220207.1~bpo11+1","3.20220207.1~deb10u1","3.20220207.1~deb11u1","3.20220510.1","3.20220510.1~deb10u1","3.20220510.1~deb11u1","3.20220809.1","3.20221108.1","3.20221108.2","3.20230214.1","3.20230214.1~deb10u1","3.20230214.1~deb11u1","3.20230512.1","3.20230808.1","3.20230808.1~deb10u1","3.20230808.1~deb11u1","3.20230808.1~deb12u1","3.20231114.1","3.20231114.1~deb10u1","3.20231114.1~deb11u1","3.20231114.1~deb12u1","3.20240312.1","3.20240312.1~deb10u1","3.20240312.1~deb11u1","3.20240312.1~deb12u1","3.20240514.1","3.20240514.1~deb11u1","3.20240514.1~deb12u1","3.20240531.1","3.20240531.1+nmu1","3.20240813.1","3.20240813.1~deb11u1","3.20240813.1~deb12u1","3.20240813.2","3.20240910.1","3.20240910.1~deb11u1","3.20240910.1~deb12u1","3.20241112.1","3.20241112.1~deb11u1","3.20241112.1~deb12u1","3.20250211.1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20250211.1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1","3.20180807a.1~deb9u1","3.20180807a.2","3.20180807a.2~bpo8+1","3.20180807a.2~bpo9+1","3.20180807a.2~deb9u1","3.20190312.1","3.20190312.1~bpo9+1","3.20190514.1","3.20190514.1~deb8u1","3.20190514.1~deb9u1","3.20190618.1","3.20190618.1~deb8u1","3.20190618.1~deb9u1","3.20190918.1","3.20191112.1","3.20191112.1~deb10u1","3.20191112.1~deb9u1","3.20191113.1","3.20191115.1","3.20191115.1~deb10u1","3.20191115.1~deb9u1","3.20191115.2","3.20191115.2~deb10u1","3.20191115.2~deb8u1","3.20191115.2~deb9u1","3.20200508.1","3.20200520.1","3.20200609.1","3.20200609.1~deb10u1","3.20200609.1~deb9u1","3.20200609.2","3.20200609.2~deb10u1","3.20200609.2~deb8u1","3.20200609.2~deb9u1","3.20200616.1","3.20200616.1~deb10u1","3.20200616.1~deb9u1","3.20201110.1","3.20201118.1","3.20201118.1~bpo10+1","3.20201118.1~deb10u1","3.20201118.1~deb9u1","3.20210216.1","3.20210216.1~deb10u1","3.20210608.1","3.20210608.2","3.20210608.2~deb10u1","3.20210608.2~deb9u2","3.20220207.1","3.20220207.1~bpo11+1","3.20220207.1~deb10u1","3.20220207.1~deb11u1","3.20220510.1","3.20220510.1~deb10u1","3.20220510.1~deb11u1","3.20220809.1","3.20221108.1","3.20221108.2","3.20230214.1","3.20230214.1~deb10u1","3.20230214.1~deb11u1","3.20230512.1","3.20230808.1","3.20230808.1~deb10u1","3.20230808.1~deb11u1","3.20230808.1~deb12u1","3.20231114.1","3.20231114.1~deb10u1","3.20231114.1~deb11u1","3.20231114.1~deb12u1","3.20240312.1","3.20240312.1~deb10u1","3.20240312.1~deb11u1","3.20240312.1~deb12u1","3.20240514.1","3.20240514.1~deb11u1","3.20240514.1~deb12u1","3.20240531.1","3.20240531.1+nmu1","3.20240813.1","3.20240813.1~deb11u1","3.20240813.1~deb12u1","3.20240813.2","3.20240910.1","3.20240910.1~deb11u1","3.20240910.1~deb12u1","3.20241112.1","3.20241112.1~deb11u1","3.20241112.1~deb12u1","3.20250211.1~deb11u1","3.20250211.1~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20250211.1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1","3.20180807a.1~deb9u1","3.20180807a.2","3.20180807a.2~bpo8+1","3.20180807a.2~bpo9+1","3.20180807a.2~deb9u1","3.20190312.1","3.20190312.1~bpo9+1","3.20190514.1","3.20190514.1~deb8u1","3.20190514.1~deb9u1","3.20190618.1","3.20190618.1~deb8u1","3.20190618.1~deb9u1","3.20190918.1","3.20191112.1","3.20191112.1~deb10u1","3.20191112.1~deb9u1","3.20191113.1","3.20191115.1","3.20191115.1~deb10u1","3.20191115.1~deb9u1","3.20191115.2","3.20191115.2~deb10u1","3.20191115.2~deb8u1","3.20191115.2~deb9u1","3.20200508.1","3.20200520.1","3.20200609.1","3.20200609.1~deb10u1","3.20200609.1~deb9u1","3.20200609.2","3.20200609.2~deb10u1","3.20200609.2~deb8u1","3.20200609.2~deb9u1","3.20200616.1","3.20200616.1~deb10u1","3.20200616.1~deb9u1","3.20201110.1","3.20201118.1","3.20201118.1~bpo10+1","3.20201118.1~deb10u1","3.20201118.1~deb9u1","3.20210216.1","3.20210216.1~deb10u1","3.20210608.1","3.20210608.2","3.20210608.2~deb10u1","3.20210608.2~deb9u2","3.20220207.1","3.20220207.1~bpo11+1","3.20220207.1~deb10u1","3.20220207.1~deb11u1","3.20220510.1","3.20220510.1~deb10u1","3.20220510.1~deb11u1","3.20220809.1","3.20221108.1","3.20221108.2","3.20230214.1","3.20230214.1~deb10u1","3.20230214.1~deb11u1","3.20230512.1","3.20230808.1","3.20230808.1~deb10u1","3.20230808.1~deb11u1","3.20230808.1~deb12u1","3.20231114.1","3.20231114.1~deb10u1","3.20231114.1~deb11u1","3.20231114.1~deb12u1","3.20240312.1","3.20240312.1~deb10u1","3.20240312.1~deb11u1","3.20240312.1~deb12u1","3.20240514.1","3.20240514.1~deb11u1","3.20240514.1~deb12u1","3.20240531.1","3.20240531.1+nmu1","3.20240813.1","3.20240813.1~deb11u1","3.20240813.1~deb12u1","3.20240813.2","3.20240910.1","3.20240910.1~deb11u1","3.20240910.1~deb12u1","3.20241112.1","3.20241112.1~deb11u1","3.20241112.1~deb12u1","3.20250211.1~deb11u1","3.20250211.1~deb12u1"]},{"source":"osv","ecosystem":"Debian:11","package":"intel-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20250211.1~deb11u1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1","3.20180807a.1~deb9u1","3.20180807a.2","3.20180807a.2~bpo8+1","3.20180807a.2~bpo9+1","3.20180807a.2~deb9u1","3.20190312.1","3.20190312.1~bpo9+1","3.20190514.1","3.20190514.1~deb8u1","3.20190514.1~deb9u1","3.20190618.1","3.20190618.1~deb8u1","3.20190618.1~deb9u1","3.20190918.1","3.20191112.1","3.20191112.1~deb10u1","3.20191112.1~deb9u1","3.20191113.1","3.20191115.1","3.20191115.1~deb10u1","3.20191115.1~deb9u1","3.20191115.2","3.20191115.2~deb10u1","3.20191115.2~deb8u1","3.20191115.2~deb9u1","3.20200508.1","3.20200520.1","3.20200609.1","3.20200609.1~deb10u1","3.20200609.1~deb9u1","3.20200609.2","3.20200609.2~deb10u1","3.20200609.2~deb8u1","3.20200609.2~deb9u1","3.20200616.1","3.20200616.1~deb10u1","3.20200616.1~deb9u1","3.20201110.1","3.20201118.1","3.20201118.1~bpo10+1","3.20201118.1~deb10u1","3.20201118.1~deb9u1","3.20210216.1","3.20210216.1~deb10u1","3.20210608.1","3.20210608.2","3.20210608.2~deb10u1","3.20210608.2~deb9u2","3.20220207.1","3.20220207.1~bpo11+1","3.20220207.1~deb10u1","3.20220207.1~deb11u1","3.20220510.1","3.20220510.1~deb10u1","3.20220510.1~deb11u1","3.20220809.1","3.20221108.1","3.20221108.2","3.20230214.1","3.20230214.1~deb10u1","3.20230214.1~deb11u1","3.20230512.1","3.20230808.1","3.20230808.1~deb10u1","3.20230808.1~deb11u1","3.20230808.1~deb12u1","3.20231114.1","3.20231114.1~deb10u1","3.20231114.1~deb11u1","3.20231114.1~deb12u1","3.20240312.1","3.20240312.1~deb10u1","3.20240312.1~deb11u1","3.20240312.1~deb12u1","3.20240514.1","3.20240514.1~deb11u1","3.20240514.1~deb12u1","3.20240531.1","3.20240531.1+nmu1","3.20240813.1","3.20240813.1~deb11u1","3.20240813.1~deb12u1","3.20240813.2","3.20240910.1","3.20240910.1~deb11u1","3.20240910.1~deb12u1","3.20241112.1","3.20241112.1~deb11u1","3.20241112.1~deb12u1"],"bundled":12},{"source":"osv","ecosystem":"Mageia:9","package":"microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20250211-1.mga9.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250211-1.oe2003sp4"}]}],"bundled":12},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250211-1.oe2203sp3"}]}],"bundled":12},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250211-1.oe2203sp4"}]}],"bundled":12},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250211-1.oe2403sp1"}]}],"bundled":12},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250211-1.oe2403sp1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1-53.25.el7_7.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"microcode_ctl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1-53.25.el7_7.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20240910-1.20250211.1.el9_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20230808-2.20250211.1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20220207-1.20250211.1.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20220809-2.20250211.1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20220809-2.20250211.1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20220207-1.20250211.1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20220207-1.20250211.1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20220207-1.20250211.1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20210216-1.20250211.1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20210216-1.20250211.1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20210216-1.20250211.1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20191115-4.20250211.1.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1-73.23.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"microcode_ctl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1-73.23.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"microcode_ctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:20250211-1.el8_10"}]}],"bundled":10}],"references":[{"url":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html","tags":["advisory","article","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00021.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43758","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-648v-44jr-95mp"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-43758","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-43758","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1745052473.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-43758","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0068.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34020","tags":["report"]},{"url":"https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250211","tags":["web","report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1171","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34440","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24582","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29214","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-31068","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-31157","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36293","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-37020","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39279","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39355","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2025:2428","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_2428.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-34440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345401","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-34440","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-43758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345416","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-43758","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345376","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24582","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-28127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345370","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-28127","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-29214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345365","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-29214","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2025:2991","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_2991.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHEA-2025:2418","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2025_2418.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHEA-2025:2419","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2025_2419.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHEA-2025:2420","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2025_2420.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHEA-2025:2421","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2025_2421.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHEA-2025:2422","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2025_2422.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHEA-2025:2423","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2025_2423.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHEA-2025:2424","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2025_2424.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHEA-2025:2427","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2025_2427.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHEA-2025:3114","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-67344","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2025_3114.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-28047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-28047","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-31068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345359","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-31068","tags":["advisory"]},{"url":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-31157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345421","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-31157","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-36293","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345367","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-36293","tags":["advisory"]},{"url":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-39279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345381","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-39279","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-43758","tags":["report"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-43758","description":"Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.","status":"published","published":"2025-02-12T21:19:24.119Z","modified":"2025-11-03T20:36:00.955Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"high","assessor":"cna"},{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:14.633899Z"}],"euvd":[{"id":"EUVD-2023-48135","description":"Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.","status":"published","published":"2025-02-12T21:19:24Z","modified":"2025-11-03T20:36:00Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"high"}],"updated_at":"2026-11-02T19:49:32.503916Z"}],"ghsa":[{"id":"GHSA-648v-44jr-95mp","title":"Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged...","description":"Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.","status":"published","published":"2025-02-13T00:33:04Z","modified":"2025-11-03T21:32:41Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:04:20.958602Z"}],"nvd":[{"id":"CVE-2023-43758","description":"Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.","status":"published","published":"2025-02-12T22:15:30.153Z","modified":"2026-06-17T06:26:22.937Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:09:20.080574Z"}],"osv":[{"id":"ALPINE-CVE-2023-43758","description":"Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.","status":"published","published":"2025-02-12T22:15:30.153Z","modified":"2026-10-26T17:17:58.643483142Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"BELL-CVE-2023-43758","status":"published","published":"2025-02-14T11:13:22.382382Z","modified":"2026-01-26T09:35:30.186899Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"DEBIAN-CVE-2023-43758","description":"Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.","status":"published","published":"2025-02-12T22:15:30.153Z","modified":"2026-10-26T18:02:06.326347521Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"OESA-2025-1171","title":"microcode_ctl security update","description":"This is a tool to transform and deploy microcode update for x86 CPUs.\r\n\r\nSecurity Fix(es):\n\nImproper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-34440)\n\nImproper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-43758)\n\nImproper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation of privilege via local access.(CVE-2024-24582)\n\nImproper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.(CVE-2024-28047)\n\nImproper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2024-28127)\n\nImproper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2024-29214)\n\nImproper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via local access.(CVE-2024-31068)\n\nImproper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.(CVE-2024-31157)\n\nImproper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.(CVE-2024-36293)\n\nSequence of processor instructions leads to unexpected behavior in the Intel(R) DSA V1.0 for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable denial of service via local access.(CVE-2024-37020)\n\nInsufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access.(CVE-2024-39279)\n\nImproper handling of physical or environmental conditions in some Intel(R) Processors may allow an authenticated user to enable denial of service via local access.(CVE-2024-39355)","status":"published","published":"2025-02-21T11:08:16Z","modified":"2026-08-18T01:18:47.888004261Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHBA-2025:2428","title":"Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update","status":"published","published":"2025-03-20T10:16:02Z","modified":"2026-08-07T10:17:03Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2025:2991","title":"Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update","status":"published","published":"2025-03-21T10:07:43Z","modified":"2026-08-07T10:17:03Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHEA-2025:2418","title":"Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update","status":"published","published":"2025-03-20T10:16:03Z","modified":"2026-08-07T10:17:08Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHEA-2025:2419","title":"Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update","status":"published","published":"2025-03-21T10:07:44Z","modified":"2026-08-07T10:17:08Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHEA-2025:2420","title":"Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update","status":"published","published":"2025-03-21T10:07:45Z","modified":"2026-08-07T10:17:09Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHEA-2025:2421","title":"Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update","status":"published","published":"2025-03-21T10:07:45Z","modified":"2026-08-07T10:17:09Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHEA-2025:2422","title":"Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update","status":"published","published":"2025-03-20T10:16:03Z","modified":"2026-08-07T10:17:10Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHEA-2025:2423","title":"Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update","status":"published","published":"2025-03-21T10:07:46Z","modified":"2026-08-07T10:17:10Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHEA-2025:2424","title":"Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update","status":"published","published":"2025-03-21T10:07:47Z","modified":"2026-08-07T10:17:11Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHEA-2025:2427","title":"Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update","status":"published","published":"2025-03-21T10:07:47Z","modified":"2026-08-07T10:17:12Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHEA-2025:3114","title":"Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update","status":"published","published":"2026-02-19T10:19:32Z","modified":"2026-10-14T10:05:58Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"UBUNTU-CVE-2023-43758","description":"Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.","status":"withdrawn","published":"2025-02-12T22:15:00Z","modified":"2025-07-08T14:32:27.86813Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"CLSA-2025-1745052473","title":"microcode_ctl: Fix of 5 CVEs","description":"- Update Intel CPU microcode to 20250211 release, addresses: CVE-2023-34440,\n  CVE-2023-43758, CVE-2024-24582, CVE-2024-28127, CVE-2024-29214\n  (INTEL-SA-01139):\n  - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at\n    revision 0x2c0003e0;\n  - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at\n    revision 0x2b000620;\n  - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat)\n    at revision 0x38;\n  - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in\n    microcode.dat) at revision 0x436;\n  - Addition of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) at\n    revision 0x3000330;\n  - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at\n    revision 0x12c;\n  - Addition of cpuid:B0674/0x32 microcode (in microcode.dat) at revision\n    0x12c;\n  - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in\n    microcode.dat) at revision 0x4124;\n  - Addition of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) at\n    revision 0x1c;\n  - Addition of cpuid:B06F6/0x07 microcode (in microcode.dat) at revision 0x38;\n  - Addition of cpuid:B06F7/0x07 microcode (in microcode.dat) at revision 0x38;\n  - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at\n    revision 0x21000291;\n  - Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision\n    0x2c000290;\n  - Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision\n    0x2c000390;\n  - Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at\n    revision 0x2b0004d0;\n  - Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at\n    revision 0x2b0005c0;\n  - Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at\n    revision 0x2c000290;\n  - Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at\n    revision 0x2c000390;\n  - Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at\n    revision 0x2b0004d0;\n  - Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at\n    revision 0x2b0005c0;\n  - Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision\n    0x2c000290;\n  - Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision\n    0x2c000390;\n  - Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at\n    revision 0x2b0004d0;\n  - Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at\n    revision 0x2b0005c0;\n  - Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at\n    revision 0x2b0004d0;\n  - Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at\n    revision 0x2b0005c0;\n  - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at\n    revision 0x2c000290;\n  - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at\n    revision 0x2c000390;\n  - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at\n    revision 0x2b0004d0;\n  - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at\n    revision 0x2b0005c0;\n  - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat)\n    at revision 0x35;\n  - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in\n    microcode.dat) at revision 0x433;\n  - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at\n    revision 0x123;\n  - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in\n    microcode.dat) at revision 0x4121;\n  - Removal of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) at\n    revision 0x4121;\n  - Removal of cpuid:B06A8/0xe0 microcode (in microcode.dat) at revision\n    0x4121;\n  - Removal of cpuid:B06E0/0x11 (ADL-N A0) microcode (in microcode.dat) at\n    revision 0x17;\n  - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at\n    revision 0x21000230;\n  - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from\n    revision 0xd0003e7 up to 0xd0003f5;\n  - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from\n    revision 0x10002b0 up to 0x10002c0;\n  - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision\n    0x2c000390 up to 0x2c0003e0;\n  - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from\n    revision 0x2b0005c0 up to 0x2b000620;\n  - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from\n    revision 0x2c000390 up to 0x2c0003e0;\n  - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from\n    revision 0x2b0005c0 up to 0x2b000620;\n  - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision\n    0x2c000390 up to 0x2c0003e0;\n  - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from\n    revision 0x2b0005c0 up to 0x2b000620;\n  - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from\n    revision 0x2b0005c0 up to 0x2b000620;\n  - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from\n    revision 0x35 up to 0x38;\n  - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from\n    revision 0x7 up to 0x9;\n  - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from\n    revision 0x433 up to 0x436;\n  - Update of cpuid:906EA/0x22 (CFL-H/S/Xeon E U0) microcode (in microcode.dat)\n    from revision 0xf8 up to 0xfa;\n  - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat)\n    from revision 0x100 up to 0x102;\n  - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from\n    revision 0x62 up to 0x63;\n  - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from\n    revision 0x1e up to 0x20;\n  - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from\n    revision 0x4121 up to 0x4124;\n  - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision\n    0x4121 up to 0x4124;\n  - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from\n    revision 0x35 up to 0x38;\n  - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from\n    revision 0x35 up to 0x38;\n  - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from\n    revision 0x21000230 up to 0x21000291;","status":"published","published":"2025-04-19T08:47:58Z","modified":"2026-06-01T00:30:38.843930831Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CVE-2023-43758","description":"Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.","status":"published","published":"2025-02-12T22:15:30Z","modified":"2026-04-16T04:40:44.942259909Z","updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"DLA-4095-1","title":"intel-microcode - security update","status":"published","published":"2025-03-29T00:00:00Z","modified":"2026-03-09T01:19:47.356155Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0068","title":"Updated microcode packages fix security vulnerabilities","description":"Improper Finite State Machines (FSMs) in Hardware Logic for some Intel®\nProcessors may allow privileged user to potentially enable denial of\nservice via local access. (CVE-2024-31068)\nImproper access control in the EDECCSSA user leaf function for some\nIntel® Processors with Intel® SGX may allow an authenticated user to\npotentially enable denial of service via local access. (CVE-2024-36293)\nImproper input validation in UEFI firmware for some Intel® processors\nmay allow a privileged user to potentially enable escalation of\nprivilege via local access. (CVE-2023-43758)\nImproper handling of physical or environmental conditions in some Intel®\nProcessors may allow an authenticated user to enable denial of service\nvia local access. (CVE-2024-39355)\nSequence of processor instructions leads to unexpected behavior in the\nIntel® DSA V1.0 for some Intel® Xeon® Processors may allow an\nauthenticated user to potentially enable denial of service via local\naccess. (CVE-2024-37020)\n","status":"published","published":"2025-02-17T18:37:36Z","modified":"2026-04-16T04:43:32.632112186Z","updated_at":"2026-11-02T15:49:43.178336Z"}]}}