Red Hat Security Advisory: microcode_ctl security update
Affects Red Hat microcode_ctlSource GCVE Database
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 13 Nov 2026, 18:31 UTC
What to do
AI-suggested
Red Hat has released a security update for the microcode_ctl packages to address this vulnerability. Applying the official microcode updates from Red Hat will mitigate the issue. No additional actions are specified beyond applying the provided microcode updates.
Description
The microcode_ctl packages for Intel and AMD processors address an industry-wide speculative execution vulnerability known as CVE-2017-5715. This flaw allows an unprivileged attacker to exploit branch target injection to read privileged memory via cache side-channel attacks. It affects modern microprocessor designs and is related to the Spectre variant 2 vulnerability. Red Hat issued a security update to mitigate this issue.
References
- access.redhat.com/errata/RHSA-2018:0039 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
- access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0039.json (opens in a new tab)