CLSA-2026:1789117244

[CLSA-2026:1789117244] microcode_ctl: Fix of CVE-2025-35973

Type:
security
Severity:
Important
Release date:
2026-09-11 09:00:54 UTC
Description:
- Update Intel CPU microcode to 20260812 release, addresses
  CVE-2025-35973 (INTEL-SA-01428); the release also carries INTEL-SA-01379,
  -01404, -01423, -01435, -01441, -01442 and -01443. 20260812 withdraws the
  06-aa-04 revision 0x2a that 20260811 shipped, so MTL C0 (cpuid:A06A4) gets
  0x28:
  - Addition of cpuid:806F8/0x10 microcode at revision 0x2c000435;
  - Addition of cpuid:806F8/0x87 microcode at revision 0x2b000685;
  - Addition of cpuid:90672/0x07 microcode at revision 0x3e;
  - Addition of cpuid:906A3/0x80 microcode at revision 0x43b;
  - Addition of cpuid:B0671/0x36 microcode at revision 0x137;
  - Addition of cpuid:B0674/0x36 microcode at revision 0x137;
  - Addition of cpuid:B06A2/0xe0 microcode at revision 0x6134;
  - Addition of cpuid:C0662/0x82 microcode at revision 0x122;
  - Addition of cpuid:C06C1/0x94 microcode at revision 0x11c;
  - Addition of cpuid:C06C2/0x94 microcode at revision 0x11c;
  - Addition of cpuid:C06C3/0x94 microcode at revision 0x11c;
  - Addition of cpuid:C06F2/0x87 microcode at revision 0x210002f4;
  - Addition of cpuid:D0650/0xc0 microcode at revision 0xc;
  - Addition of cpuid:D0651/0xc0 microcode at revision 0xc;
  - Addition of cpuid:D0670/0x36 microcode at revision 0x137;
  - Addition of cpuid:E0652/0x94 microcode at revision 0x11c;
  - Removal of cpuid:806F8/0x10 microcode at revision 0x2c000410;
  - Removal of cpuid:806F8/0x87 microcode at revision 0x2b000650;
  - Removal of cpuid:90672/0x07 microcode at revision 0x3d;
  - Removal of cpuid:906A3/0x80 microcode at revision 0x43a;
  - Removal of cpuid:B0671/0x32 microcode at revision 0x132;
  - Removal of cpuid:B0674/0x32 microcode at revision 0x132;
  - Removal of cpuid:B06A2/0xe0 microcode at revision 0x6133;
  - Removal of cpuid:C0662/0x82 microcode at revision 0x11a;
  - Removal of cpuid:C06F2/0x87 microcode at revision 0x21000291;
  - Removal of cpuid:C06F2/0x87 microcode at revision 0x210002c0;
  - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode from revision 0xd000410
    up to 0xd000433;
  - Update of cpuid:606C1/0x10 microcode from revision 0x10002e0 up to
    0x1000301;
  - Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode from revision 0xca up to
    0xce;
  - Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode from revision 0xbc
    up to 0xbe;
  - Update of cpuid:806C2/0xc2 (TGL-R C0) microcode from revision 0x3c up to
    0x3e;
  - Update of cpuid:806D1/0xc2 (TGL-H R0) microcode from revision 0x56 up to
    0x58;
  - Update of cpuid:806F4/0x10 microcode from revision 0x2c000410 up to
    0x2c000435;
  - Update of cpuid:806F4/0x87 microcode from revision 0x2b000650 up to
    0x2b000685;
  - Update of cpuid:806F5/0x10 microcode from revision 0x2c000410 up to
    0x2c000435;
  - Update of cpuid:806F5/0x87 microcode from revision 0x2b000650 up to
    0x2b000685;
  - Update of cpuid:806F6/0x10 microcode from revision 0x2c000410 up to
    0x2c000435;
  - Update of cpuid:806F6/0x87 microcode from revision 0x2b000650 up to
    0x2b000685;
  - Update of cpuid:806F7/0x87 microcode from revision 0x2b000650 up to
    0x2b000685;
  - Update of cpuid:90675/0x07 microcode from revision 0x3d up to 0x3e;
  - Update of cpuid:906A4/0x40 microcode from revision 0xb up to 0xc;
  - Update of cpuid:906A4/0x80 microcode from revision 0x43a up to 0x43b;
  - Update of cpuid:A0671/0x02 (RKL-S B0) microcode from revision 0x64 up to
    0x66;
  - Update of cpuid:A06A4/0xe6 microcode from revision 0x25 up to 0x28;
  - Update of cpuid:A06D1/0x20 microcode from revision 0xa000124 up to
    0xa000151;
  - Update of cpuid:A06D1/0x95 microcode from revision 0x10003f0 up to
    0x1000434;
  - Update of cpuid:A06E1/0x97 microcode from revision 0x1000273 up to
    0x1000309;
  - Update of cpuid:A06F3/0x01 microcode from revision 0x3000382 up to
    0x30003b2;
  - Update of cpuid:B0650/0x80 microcode from revision 0xa up to 0xe;
  - Update of cpuid:B06A3/0xe0 microcode from revision 0x6133 up to 0x6134;
  - Update of cpuid:B06A8/0xe0 microcode from revision 0x6133 up to 0x6134;
  - Update of cpuid:B06D1/0x80 microcode from revision 0x125 up to 0x128;
  - Update of cpuid:B06E0/0x19 microcode from revision 0x1e up to 0x21;
  - Update of cpuid:B06F2/0x07 microcode from revision 0x3d up to 0x3e;
  - Update of cpuid:B06F5/0x07 microcode from revision 0x3d up to 0x3e;
  - Update of cpuid:B06F6/0x07 microcode from revision 0x3d up to 0x3e;
  - Update of cpuid:B06F7/0x07 microcode from revision 0x3d up to 0x3e;
  - Update of cpuid:C0652/0x82 microcode from revision 0x11a up to 0x122;
  - Update of cpuid:C0664/0x82 microcode from revision 0x11a up to 0x122;
  - Update of cpuid:C06A2/0x82 microcode from revision 0x11a up to 0x122;
  - Update of cpuid:C06F1/0x87 microcode from revision 0x21000291 up to
    0x210002f4;
  - Update of cpuid:C06F1/0x87 microcode from revision 0x210002c0 up to
    0x210002f4;
- Keep cpuid:50656 (CLX-SP B0) and cpuid:C06F1 (EMR-SP A0) microcode that
  upstream dropped, as microcode_ctl-4:20260812-1.el8_10 does.
CVEs fixed:
CVE-2025-35973
Updated packages:
microcode_ctl-20260812-2.el8.tuxcare.els1.x86_64.rpm
sha:776a767fd8dd7a5fc3cb6dae6a2868231b21bab9a7e1a76422894d71079e4c90
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.