Red Hat Security Advisory: microcode_ctl security update
Affects Red Hat microcode_ctlSource GCVE Database
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 13 Nov 2026, 18:32 UTC
What to do
AI-suggested
Apply the microcode_ctl security update provided by Red Hat to deploy the microcode-level fix for CVE-2017-5715. This update complements kernel mitigations and is necessary to fully address the vulnerability. No additional action is indicated beyond applying the official microcode update.
Description
The microcode_ctl packages for Intel and AMD processors received a security update addressing an industry-wide speculative execution vulnerability known as CVE-2017-5715. This flaw allows an unprivileged attacker to exploit branch target injection to read privileged memory via cache side-channel attacks. The issue affects modern microprocessor designs and is related to speculative execution optimizations. This update is the microcode counterpart to the kernel mitigation for the same CVE.
References
- access.redhat.com/errata/RHSA-2018:0034 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
- access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0034.json (opens in a new tab)