Red Hat Security Advisory: microcode_ctl security update
Affects Red Hat microcode_ctlSource GCVE Database
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 13 Nov 2026, 18:31 UTC
What to do
AI-suggested
Red Hat has released a security update for the microcode_ctl packages that addresses this vulnerability. Applying the official microcode update from Red Hat will mitigate the issue. No additional action beyond applying the update is indicated.
Description
The microcode_ctl packages for Intel and AMD processors address a speculative execution vulnerability known as CVE-2017-5715. This flaw allows an unprivileged attacker to perform cache side-channel attacks to read privileged memory by exploiting branch target injection in speculative execution. It is related to the kernel mitigation for the same CVE and affects modern microprocessor designs. Red Hat has issued a security update to mitigate this issue.
References
- access.redhat.com/errata/RHSA-2018:0040 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
- access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0040.json (opens in a new tab)