Homepage

microcode_ctl

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the microcode_ctl package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Incorrect Privilege Assignment

<4:20260210-1.20260812.1.el9_8
  • H
Use of Out-of-range Pointer Offset

<4:20260210-1.20260812.1.el9_8
  • H
Incorrect Privilege Assignment

<4:20260210-1.20260812.1.el9_8
  • H
Use of Out-of-range Pointer Offset

<4:20260210-1.20260812.1.el9_8
  • M
Insufficient Granularity of Access Control

*
  • M
Inclusion of Functionality from Untrusted Control Sphere

*
  • M
Processor Optimization Removal or Modification of Security-critical Code

*
  • M
CVE-2026-20709

*
  • H
Insufficient Granularity of Access Control

*
  • L
Improper Handling of Values

*
  • M
Incomplete Cleanup

<4:20220809-1.el9
  • M
Improper Cross-boundary Removal of Sensitive Data

<4:20220809-1.el9
  • M
Improper Input Validation

<4:20220809-1.el9
  • M
Incorrect Default Permissions

<4:20220809-1.el9
  • M
Incomplete Cleanup

<4:20220809-1.el9
  • M
Improper Cross-boundary Removal of Sensitive Data

<4:20220809-1.el9
  • M
Improper Input Validation

<4:20220809-1.el9
  • M
Incorrect Default Permissions

<4:20220809-1.el9
  • M
Incomplete Cleanup

<4:20220809-1.el9
  • M
Improper Cross-boundary Removal of Sensitive Data

<4:20220809-1.el9
  • M
Improper Input Validation

<4:20220809-1.el9
  • M
Incorrect Default Permissions

<4:20220809-1.el9
  • M
Incomplete Cleanup

<4:20220809-1.el9
  • M
Improper Cross-boundary Removal of Sensitive Data

<4:20220809-1.el9
  • M
Improper Input Validation

<4:20220809-1.el9
  • M
Incorrect Default Permissions

<4:20220809-1.el9
  • M
Incomplete Cleanup

<4:20220809-1.el9
  • M
Improper Cross-boundary Removal of Sensitive Data

<4:20220809-1.el9
  • M
Improper Input Validation

<4:20220809-1.el9
  • M
Incorrect Default Permissions

<4:20220809-1.el9
  • M
Incomplete Cleanup

<4:20220809-1.el9
  • M
Improper Cross-boundary Removal of Sensitive Data

<4:20220809-1.el9
  • M
Improper Input Validation

<4:20220809-1.el9
  • M
Incorrect Default Permissions

<4:20220809-1.el9
  • M
Incomplete Cleanup

<4:20220809-1.el9
  • M
Improper Cross-boundary Removal of Sensitive Data

<4:20220809-1.el9
  • M
Improper Input Validation

<4:20220809-1.el9
  • M
Incorrect Default Permissions

<4:20220809-1.el9
  • M
Incomplete Cleanup

<4:20220809-1.el9
  • M
Improper Cross-boundary Removal of Sensitive Data

<4:20220809-1.el9
  • M
Improper Input Validation

<4:20220809-1.el9
  • M
Incorrect Default Permissions

<4:20220809-1.el9
  • M
Incomplete Cleanup

<4:20220809-1.el9
  • M
Improper Cross-boundary Removal of Sensitive Data

<4:20220809-1.el9
  • M
Improper Input Validation

<4:20220809-1.el9
  • M
Incorrect Default Permissions

<4:20220809-1.el9
  • M
Incomplete Cleanup

<4:20220809-1.el9
  • M
Improper Cross-boundary Removal of Sensitive Data

<4:20220809-1.el9
  • M
Improper Input Validation

<4:20220809-1.el9
  • M
Incorrect Default Permissions

<4:20220809-1.el9
  • H
Unauthorized Error Injection Can Degrade Hardware Redundancy

<4:20220809-2.20230808.2.el9_2
  • H
Unauthorized Error Injection Can Degrade Hardware Redundancy

<4:20220809-2.20230808.2.el9_2
  • H
Unauthorized Error Injection Can Degrade Hardware Redundancy

<4:20220809-2.20230808.2.el9_2
  • H
Unauthorized Error Injection Can Degrade Hardware Redundancy

<4:20220809-2.20230808.2.el9_2
  • M
Insufficient Granularity of Access Control

<4:20250211-1.el9_6
  • M
Improper Initialization

<4:20250211-1.el9_6
  • M
Improper Input Validation

<4:20250211-1.el9_6
  • M
Insufficient Granularity of Access Control

<4:20250211-1.el9_6
  • M
Improper Initialization

<4:20250211-1.el9_6
  • M
Improper Input Validation

<4:20250211-1.el9_6
  • M
Insufficient Granularity of Access Control

<4:20250211-1.el9_6
  • M
Improper Initialization

<4:20250211-1.el9_6
  • M
Improper Input Validation

<4:20250211-1.el9_6
  • M
Insufficient Granularity of Access Control

<4:20250211-1.el9_6
  • M
Improper Initialization

<4:20250211-1.el9_6
  • M
Improper Input Validation

<4:20250211-1.el9_6
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • M
Resource Exhaustion

<4:20240910-1.el9_5
  • M
Information Exposure

<4:20240910-1.el9_5
  • M
Incorrect Calculation

<4:20240910-1.el9_5
  • M
Protection Mechanism Failure

<4:20240910-1.el9_5
  • M
Non-Transparent Sharing of Microarchitectural Resources

<4:20240910-1.el9_5
  • M
CVE-2023-28746

<4:20240910-1.el9_5
  • M
Protection Mechanism Failure

<4:20240910-1.el9_5
  • H
Incorrect Default Permissions

<4:20230808-2.el9
  • H
CVE-2022-21216

<4:20230808-2.el9
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • M
Resource Exhaustion

<4:20240910-1.el9_5
  • M
Information Exposure

<4:20240910-1.el9_5
  • M
Incorrect Calculation

<4:20240910-1.el9_5
  • M
Protection Mechanism Failure

<4:20240910-1.el9_5
  • M
Non-Transparent Sharing of Microarchitectural Resources

<4:20240910-1.el9_5
  • M
CVE-2023-28746

<4:20240910-1.el9_5
  • M
Protection Mechanism Failure

<4:20240910-1.el9_5
  • H
Incorrect Default Permissions

<4:20230808-2.el9
  • H
CVE-2022-21216

<4:20230808-2.el9
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • M
Resource Exhaustion

<4:20240910-1.el9_5
  • M
Information Exposure

<4:20240910-1.el9_5
  • M
Incorrect Calculation

<4:20240910-1.el9_5
  • M
Protection Mechanism Failure

<4:20240910-1.el9_5
  • M
Non-Transparent Sharing of Microarchitectural Resources

<4:20240910-1.el9_5
  • M
CVE-2023-28746

<4:20240910-1.el9_5
  • M
Protection Mechanism Failure

<4:20240910-1.el9_5
  • M
Resource Exhaustion

<4:20240910-1.el9_5
  • M
Information Exposure

<4:20240910-1.el9_5
  • M
Incorrect Calculation

<4:20240910-1.el9_5
  • M
Protection Mechanism Failure

<4:20240910-1.el9_5
  • M
Non-Transparent Sharing of Microarchitectural Resources

<4:20240910-1.el9_5
  • M
CVE-2023-28746

<4:20240910-1.el9_5
  • M
Protection Mechanism Failure

<4:20240910-1.el9_5
  • H
Incorrect Default Permissions

<4:20230808-2.el9
  • H
CVE-2022-21216

<4:20230808-2.el9
  • H
Incorrect Default Permissions

<4:20230808-2.el9
  • H
CVE-2022-21216

<4:20230808-2.el9
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • M
CVE-2025-24495

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2025-20623

<4:20250211-1.20250512.1.el9_6
  • M
Incorrect Behavior Order

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-45332

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-43420

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-28956

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2025-24495

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2025-20623

<4:20250211-1.20250512.1.el9_6
  • M
Incorrect Behavior Order

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-45332

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-43420

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-28956

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2025-24495

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2025-20623

<4:20250211-1.20250512.1.el9_6
  • M
Incorrect Behavior Order

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-45332

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-43420

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-28956

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2025-24495

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2025-20623

<4:20250211-1.20250512.1.el9_6
  • M
Incorrect Behavior Order

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-45332

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-43420

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-28956

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2025-20623

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2024-45332

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2024-43420

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2025-20623

<4:20220809-2.20250512.1.el9_2
  • M
CVE-2024-45332

<4:20220809-2.20250512.1.el9_2
  • M
CVE-2024-43420

<4:20220809-2.20250512.1.el9_2
  • M
CVE-2025-20623

<4:20220207-1.20250512.1.el9_0
  • M
CVE-2024-45332

<4:20220207-1.20250512.1.el9_0
  • M
CVE-2024-43420

<4:20220207-1.20250512.1.el9_0
  • M
CVE-2025-20623

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2024-45332

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2024-43420

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2025-20623

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2024-45332

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2024-43420

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2025-24495

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2025-20623

<4:20250211-1.20250512.1.el9_6
  • M
Incorrect Behavior Order

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-45332

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-43420

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-28956

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2025-24495

<4:20230808-2.20250512.1.el9_4
  • M
Incorrect Behavior Order

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2024-28956

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2025-24495

<4:20220809-2.20250512.1.el9_2
  • M
Incorrect Behavior Order

<4:20220809-2.20250512.1.el9_2
  • M
CVE-2024-28956

<4:20220809-2.20250512.1.el9_2
  • M
CVE-2025-24495

<4:20220207-1.20250512.1.el9_0
  • M
Incorrect Behavior Order

<4:20220207-1.20250512.1.el9_0
  • M
CVE-2024-28956

<4:20220207-1.20250512.1.el9_0
  • M
CVE-2025-24495

<4:20230808-2.20250512.1.el9_4
  • M
Incorrect Behavior Order

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2024-28956

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2025-24495

<4:20230808-2.20250512.1.el9_4
  • M
Incorrect Behavior Order

<4:20230808-2.20250512.1.el9_4
  • M
CVE-2024-28956

<4:20230808-2.20250512.1.el9_4
  • M
Uncaught Exception

*
  • M
Insufficient Resource Pool

*
  • M
CVE-2025-20623

<4:20250211-1.20250512.1.el9_6
  • M
Hardware Features Enable Physical Attacks from Software

*
  • M
CVE-2024-45332

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-43420

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2025-24495

<4:20250211-1.20250512.1.el9_6
  • M
Incorrect Behavior Order

<4:20250211-1.20250512.1.el9_6
  • M
CVE-2024-28956

<4:20250211-1.20250512.1.el9_6
  • M
Insufficient Granularity of Access Control

<4:20250211-1.el9_6
  • M
Improper Initialization

<4:20250211-1.el9_6
  • M
Improper Input Validation

<4:20250211-1.el9_6
  • M
Improper Access Control

*
  • M
Improper Finite State Machines (FSMs) in Hardware Logic

*
  • M
Improper Finite State Machines (FSMs) in Hardware Logic

*
  • M
Resource Exhaustion

<4:20240910-1.el9_5
  • M
Information Exposure

<4:20240910-1.el9_5
  • M
Incorrect Calculation

<4:20240910-1.el9_5
  • M
Protection Mechanism Failure

<4:20240910-1.el9_5
  • M
Non-Transparent Sharing of Microarchitectural Resources

<4:20240910-1.el9_5
  • M
CVE-2023-28746

<4:20240910-1.el9_5
  • M
Protection Mechanism Failure

<4:20240910-1.el9_5
  • M
Resource Exhaustion

<4:20230808-2.20240531.1.el9_4
  • M
Information Exposure

<4:20230808-2.20240531.1.el9_4
  • M
Incorrect Calculation

<4:20230808-2.20240531.1.el9_4
  • M
Protection Mechanism Failure

<4:20230808-2.20240531.1.el9_4
  • M
Non-Transparent Sharing of Microarchitectural Resources

<4:20230808-2.20240531.1.el9_4
  • M
CVE-2023-28746

<4:20230808-2.20240531.1.el9_4
  • M
Protection Mechanism Failure

<4:20230808-2.20240531.1.el9_4
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20220207-1.20250211.1.el9_0
  • H
Improper Input Validation

<4:20220207-1.20250211.1.el9_0
  • H
Improper Input Validation

<4:20220207-1.20250211.1.el9_0
  • H
Improper Input Validation

<4:20220207-1.20250211.1.el9_0
  • H
Improper Input Validation

<4:20220207-1.20250211.1.el9_0
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20220809-2.20250211.1.el9_2
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20230808-2.20250211.1.el9_4
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Unauthorized Error Injection Can Degrade Hardware Redundancy

<4:20220809-2.20230808.2.el9_2
  • H
Incorrect Default Permissions

<4:20230808-2.el9
  • H
CVE-2022-21216

<4:20230808-2.el9
  • H
Unauthorized Error Injection Can Degrade Hardware Redundancy

<4:20220809-2.20230808.2.el9_2
  • H
Unauthorized Error Injection Can Degrade Hardware Redundancy

<4:20220809-2.20230808.2.el9_2
  • H
Unauthorized Error Injection Can Degrade Hardware Redundancy

<4:20220809-2.20230808.2.el9_2
  • H
Incorrect Default Permissions

<4:20230808-2.el9
  • H
CVE-2022-21216

<4:20230808-2.el9
  • H
Incorrect Default Permissions

<4:20230808-2.el9
  • H
CVE-2022-21216

<4:20230808-2.el9
  • H
Unauthorized Error Injection Can Degrade Hardware Redundancy

<4:20220809-2.20230808.2.el9_2
  • H
Unauthorized Error Injection Can Degrade Hardware Redundancy

<4:20220809-2.20230808.2.el9_2
  • M
Insufficient Granularity of Access Control

<4:20250211-1.el9_6
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • M
Improper Input Validation

<4:20250211-1.el9_6
  • M
Improper Initialization

<4:20250211-1.el9_6
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • H
Improper Input Validation

<4:20240910-1.20250211.1.el9_5
  • M
Resource Exhaustion

<4:20230808-2.20240531.1.el9_4
  • M
Information Exposure

<4:20230808-2.20240531.1.el9_4
  • M
Incorrect Calculation

<4:20230808-2.20240531.1.el9_4
  • M
Protection Mechanism Failure

<4:20230808-2.20240531.1.el9_4
  • M
Non-Transparent Sharing of Microarchitectural Resources

<4:20230808-2.20240531.1.el9_4
  • M
CVE-2023-28746

<4:20230808-2.20240531.1.el9_4
  • M
Protection Mechanism Failure

<4:20230808-2.20240531.1.el9_4
  • M
Improper Finite State Machines (FSMs) in Hardware Logic

*
  • M
Resource Exhaustion

<4:20240910-1.el9_5
  • M
Information Exposure

<4:20240910-1.el9_5
  • M
Non-Transparent Sharing of Microarchitectural Resources

<4:20240910-1.el9_5
  • M
Incorrect Calculation

<4:20240910-1.el9_5
  • M
Protection Mechanism Failure

<4:20240910-1.el9_5
  • M
CVE-2023-28746

<4:20240910-1.el9_5
  • M
Protection Mechanism Failure

<4:20240910-1.el9_5
  • H
Unauthorized Error Injection Can Degrade Hardware Redundancy

<4:20220809-2.20230808.2.el9_2
  • M
Improper Cross-boundary Removal of Sensitive Data

<4:20220809-1.el9
  • M
Improper Input Validation

<4:20220809-1.el9
  • M
Incorrect Default Permissions

<4:20220809-1.el9
  • M
CVE-2022-38090

*
  • M
Incorrect Calculation

*
  • H
Incorrect Default Permissions

<4:20230808-2.el9
  • H
CVE-2022-21216

<4:20230808-2.el9
  • M
Incomplete Cleanup

<4:20220809-1.el9