microcode_ctl

Direct Vulnerabilities

Known vulnerabilities in the microcode_ctl package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Processor Optimization Removal or Modification of Security-critical Code	*
M CVE-2026-20709	*
L Improper Handling of Values	*
M CVE-2024-43420	*
M Insufficient Resource Pool	*
M CVE-2025-20623	*
M Uncaught Exception	*
M Hardware Features Enable Physical Attacks from Software	*
M CVE-2024-45332	*
M CVE-2024-28956	*
M CVE-2025-24495	*
M Incorrect Behavior Order	*
M Improper Finite State Machines (FSMs) in Hardware Logic	*
M Resource Exhaustion	*
M Improper Input Validation	*
L Information Exposure	*
M CVE-2023-28746	*
M Non-Transparent Sharing of Microarchitectural Resources	*
M Incorrect Calculation	*
M Protection Mechanism Failure	*
M Protection Mechanism Failure	*
M CVE-2022-38090	*
M Incorrect Calculation	*
H Incorrect Default Permissions	*
H CVE-2022-21216	*
M Out-of-bounds Read	*
M CVE-2021-0127	*
M Improper Initialization	*
M Improper Cross-boundary Removal of Sensitive Data	<2:1.17-33.31.el6_10
M Information Exposure	<2:1.17-33.26.el6_10
M Information Exposure	<2:1.17-33.26.el6_10
M Information Exposure	<2:1.17-33.26.el6_10
H Insufficient Granularity of Access Control	<2:1.17-33.19.el6_10
M Improper Cross-boundary Removal of Sensitive Data	<2:1.17-33.31.el6_10