SUSE-SU-2026:0670-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:0670-1

Upstream

CVE (2)

Related

CVE (2)

Published

2026-02-26T15:21:41Z

Modified

2026-03-11T07:31:40Z

Summary

Security update for ucode-intel

Details

This update for ucode-intel fixes the following issues:

Intel CPU Microcode was updated to the 20260210 release (bsc#1258046)
CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access. (bsc#1229129)
CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege. (bsc#1258046)

References

Affected packages

Name: microcode_ctl
Purl: pkg:rpm/suse/microcode_ctl&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.17-102.83.90.1

{
    "binaries":  [
        {
            "microcode_ctl":  "1.17-102.83.90.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0670-1.json"