microcode_ctl: Fix of 9 CVEs

{
  "id": "9ecf204b996cf38470a880b502cdf3d13ba984fde712966c03ed625ca94e0ec5",
  "url": "https://osv.dev/vulnerability/CLSA-2025-1757692837",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "microcode_ctl: Fix of 9 CVEs",
    "summary": "- Update Intel CPU microcode to 20250812, addresses: CVE-2024-28047, CVE-2024-31157, CVE-2024-39279, CVE-2024-28956, CVE-2024-43420, CVE-2024-45332, CVE-2025-24495, CVE-2025-20623, CVE-2025-20012 - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000401; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000643; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Addition of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) at revision 0xa000100; - Addition of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) at revision 0x10003d0; - Addition of cpuid:B0650/0x80 (ARL-U A1) microcode (in microcode.dat) at revision 0xa; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4129; - Addition of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) at revision 0x123; - Addition of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0664/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06A2/0x82 microcode (in microcode.dat) at revision 0x119; - A",
    "evidence": "osv:CLSA-2025-1757692837",
    "products": [
      {
        "name": {
          "value": "microcode_ctl",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4:20220809-2.20250812.1.el9_2.tuxcare.els1",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CLSA-2025-1757692837",
      "aliases": [
        "CLSA-2025-1757692837"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "4:20220809-2.20250812.1.el9_2.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "microcode_ctl",
            "purl": "pkg:rpm/tuxcare/microcode_ctl?distro=almalinux-9.2",
            "ecosystem": "TuxCare:AlmaLinux:9.2"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1757692837.json"
          }
        }
      ],
      "modified": "2026-10-21T10:46:16.935063259Z",
      "provider": "osv",
      "upstream": [
        "CVE-2024-28047",
        "CVE-2024-28956",
        "CVE-2024-31157",
        "CVE-2024-39279",
        "CVE-2024-43420",
        "CVE-2024-45332",
        "CVE-2025-20012",
        "CVE-2025-20623",
        "CVE-2025-24495"
      ],
      "references": [
        "https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1757692837.html"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2024-28047",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-28956",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-31157",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-39279",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-43420",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-45332",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-20012",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-20623",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-24495",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 392224,
  "published_at": "2025-09-12T16:00:41+00:00"
}