microcode_ctl: Fix of 6 CVEs

{
  "id": "12e87f7c86b1aac2946a8b5517682943d2d12d4d59dba6bafd5ca78957652cfb",
  "url": "https://osv.dev/vulnerability/CLSA-2025-1754381655",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "microcode_ctl: Fix of 6 CVEs",
    "summary": "- Update Intel CPU microcode to 20250512: - Fixes CVE-2025-20012, CVE-2025-20623, CVE-2025-24495, CVE-2024-28956 CVE-2024-43420, CVE-2024-45332 - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003f7; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000639; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Addition of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) at revision 0xa0000d1; - Addition of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) at revision 0x10003a2; - Addition of cpuid:B0650/0x80 (ARL-U A1) microcode (in microcode.dat) at revision 0xa; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4128; - Addition of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) at revision 0x11f; - Addition of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) at revision 0x118; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x118; - Addition of cpuid:C0664/0x82 microcode (in microcode.dat) at revision 0x118; - Addition of cpuid:C06A2/0x82 microcode (in microcode.dat) at revision 0x118; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (i",
    "evidence": "osv:CLSA-2025-1754381655",
    "products": [
      {
        "name": {
          "value": "microcode_ctl",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4:20250512-2.el8.tuxcare.els1",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CLSA-2025-1754381655",
      "aliases": [
        "CLSA-2025-1754381655"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "4:20250512-2.el8.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "microcode_ctl",
            "purl": "pkg:rpm/tuxcare/microcode_ctl?distro=centos-stream-8",
            "ecosystem": "TuxCare:CentOS-Stream:8"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1754381655.json"
          }
        }
      ],
      "modified": "2026-10-21T10:45:53.312994689Z",
      "provider": "osv",
      "upstream": [
        "CVE-2024-28956",
        "CVE-2024-43420",
        "CVE-2024-45332",
        "CVE-2025-20012",
        "CVE-2025-20623",
        "CVE-2025-24495"
      ],
      "references": [
        "https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2025-1754381655.html"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2024-28956",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-43420",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-45332",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-20012",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-20623",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-24495",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 392188,
  "published_at": "2025-08-05T08:14:19+00:00"
}