{"id":"CLSA-2023-1701444720","summary":"microcode_ctl: Fix of 4 CVEs","details":"- Update Intel CPU microcode to microcode-20231114 release, addresses\n  CVE-2022-40982 (INTEL-SA-00828), CVE-2022-41804 (INTEL-SA-00837),\n  CVE-2023-23908 (INTEL-SA-00836), CVE-2023-23583 (INTEL-SA-00950):\n  - Addition of 06-9a-04/0x40 microcode (in 06-9a-04) at revision 0x5;\n  - Addition of 06-ba-02/0xe0 microcode (in 06-ba-02) at revision 0x411c;\n  - Addition of 06-ba-02/0xe0 microcode (in 06-ba-02) at revision 0x411c;\n  - Addition of 06-ba-03/0xe0 microcode (in 06-ba-02) at revision 0x411c;\n  - Addition of 06-ba-02/0xe0 microcode (in 06-ba-03) at revision 0x411c;\n  - Addition of 06-ba-02/0xe0 microcode (in 06-ba-03) at revision 0x411c;\n  - Addition of 06-ba-03/0xe0 microcode (in 06-ba-03) at revision 0x411c;\n  - Addition of 06-be-00/0x11 microcode (in 06-be-00) at revision 0x12;\n  - Removal of 06-ba-02/0xc0 microcode (in 06-ba-02) at revision 0x410e;\n  - Removal of 06-ba-02/0xc0 microcode (in 06-ba-02) at revision 0x410e;\n  - Removal of 06-ba-03/0xc0 microcode (in 06-ba-02) at revision 0x410e;\n  - Removal of 06-ba-02/0xc0 microcode (in 06-ba-03) at revision 0x410e;\n  - Removal of 06-ba-02/0xc0 microcode (in 06-ba-03) at revision 0x410e;\n  - Removal of 06-ba-03/0xc0 microcode (in 06-ba-03) at revision 0x410e;\n  - Update of 06-55-03/0x97 (SKX-SP B1) microcode (in 06-55-03) from revision\n    0x1000161 up to 0x1000181;\n  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in 06-55-04)\n    from revision 0x2006e05 up to 0x2007006;\n  - Update of 06-55-06/0xbf (CLX-SP B0) microcode (in 06-55-06) from revision\n    0x4003303 up to 0x4003604;\n  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode (in 06-55-07) from\n    revision 0x5003303 up to 0x5003604;\n  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode (in 06-55-0b) from revision\n    0x7002503 up to 0x7002703;\n  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode (in 06-6a-06) from revision\n    0xd000389 up to 0xd0003b9;\n  - Update of 06-6c-01/0x10 (ICL-D B0) microcode (in 06-6c-01) from revision\n    0x1000211 up to 0x1000268;\n  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode (in 06-7e-05) from revision\n    0xb8 up to 0xc2;\n  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode (in 06-8a-01) from revision\n    0x32 up to 0x33;\n  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in 06-8c-01) from\n    revision 0xa6 up to 0xb4;\n  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode (in 06-8c-02) from revision\n    0x28 up to 0x34;\n  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode (in 06-8d-01) from revision\n    0x42 up to 0x4e;\n  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in 06-8e-09) from\n    revision 0xf0 up to 0xf4;\n  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in 06-8e-09) from\n    revision 0xf0 up to 0xf4;\n  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in 06-8e-0a)\n    from revision 0xf0 up to 0xf4;\n  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in 06-8e-0b) from revision\n    0xf0 up to 0xf4;\n  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode\n    (in 06-8e-0c) from revision 0xf4 up to 0xf8;\n  - Update of 06-8f-04/0x10 microcode (in 06-8f-04) from revision 0x2c000170 up\n    to 0x2c000290;\n  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-04) from\n    revision 0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-04) from revision\n    0x2c000170 up to 0x2c000290;\n  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-04) from revision\n    0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-06/0x10 microcode (in 06-8f-04) from revision 0x2c000170 up\n    to 0x2c000290;\n  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-04) from revision\n    0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-04) from\n    revision 0x2b000181 up to 0x2b0004d0;\n  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision\n    0x2c000290;\n  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision\n    0x2c000290;\n  - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision\n    0x2c000170;\n  - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision\n    0x2c000170;\n  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at\n    revision 0x2b0004d0;\n  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at\n    revision 0x2b0004d0;\n  - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision\n    0x2b000181;\n  - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision\n    0x2b000181;\n  - Update of 06-8f-04/0x10 microcode (in 06-8f-05) from revision 0x2c000170 up\n    to 0x2c000290;\n  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-05) from\n    revision 0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-05) from revision\n    0x2c000170 up to 0x2c000290;\n  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-05) from revision\n    0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-06/0x10 microcode (in 06-8f-05) from revision 0x2c000170 up\n    to 0x2c000290;\n  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-05) from revision\n    0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-05) from\n    revision 0x2b000181 up to 0x2b0004d0;\n  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision\n    0x2c000290;\n  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision\n    0x2c000290;\n  - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision\n    0x2c000170;\n  - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision\n    0x2c000170;\n  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at\n    revision 0x2b0004d0;\n  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at\n    revision 0x2b0004d0;\n  - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision\n    0x2b000181;\n  - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision\n    0x2b000181;\n  - Update of 06-8f-04/0x10 microcode (in 06-8f-06) from revision 0x2c000170 up\n    to 0x2c000290;\n  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-06) from\n    revision 0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-06) from revision\n    0x2c000170 up to 0x2c000290;\n  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-06) from revision\n    0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-06/0x10 microcode (in 06-8f-06) from revision 0x2c000170 up\n    to 0x2c000290;\n  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-06) from revision\n    0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-06) from\n    revision 0x2b000181 up to 0x2b0004d0;\n  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision\n    0x2c000290;\n  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision\n    0x2c000290;\n  - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision\n    0x2c000170;\n  - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision\n    0x2c000170;\n  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at\n    revision 0x2b0004d0;\n  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at\n    revision 0x2b0004d0;\n  - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision\n    0x2b000181;\n  - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision\n    0x2b000181;\n  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-07) from\n    revision 0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-07) from revision\n    0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-07) from revision\n    0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-07) from\n    revision 0x2b000181 up to 0x2b0004d0;\n  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at\n    revision 0x2b0004d0;\n  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at\n    revision 0x2b0004d0;\n  - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision\n    0x2b000181;\n  - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision\n    0x2b000181;\n  - Update of 06-8f-04/0x10 microcode (in 06-8f-08) from revision 0x2c000170 up\n    to 0x2c000290;\n  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-08) from\n    revision 0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-08) from revision\n    0x2c000170 up to 0x2c000290;\n  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-08) from revision\n    0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-06/0x10 microcode (in 06-8f-08) from revision 0x2c000170 up\n    to 0x2c000290;\n  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-08) from revision\n    0x2b000181 up to 0x2b0004d0;\n  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-08) from\n    revision 0x2b000181 up to 0x2b0004d0;\n  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision\n    0x2c000290;\n  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision\n    0x2c000290;\n  - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision\n    0x2c000170;\n  - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision\n    0x2c000170;\n  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at\n    revision 0x2b0004d0;\n  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at\n    revision 0x2b0004d0;\n  - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision\n    0x2b000181;\n  - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision\n    0x2b000181;\n  - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at\n    revision 0x32;\n  - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at\n    revision 0x32;\n  - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at\n    revision 0x2c;\n  - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at\n    revision 0x2c;\n  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-97-02) from\n    revision 0x2c up to 0x32;\n  - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-97-02) from revision 0x2c\n    up to 0x32;\n  - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-97-02) from revision 0x2c\n    up to 0x32;\n  - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at\n    revision 0x32;\n  - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at\n    revision 0x32;\n  - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at\n    revision 0x2c;\n  - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at\n    revision 0x2c;\n  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-97-05) from\n    revision 0x2c up to 0x32;\n  - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-97-05) from revision 0x2c\n    up to 0x32;\n  - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-97-05) from revision 0x2c\n    up to 0x32;\n  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at\n    revision 0x430;\n  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at\n    revision 0x430;\n  - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at\n    revision 0x429;\n  - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at\n    revision 0x429;\n  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in 06-9a-03) from\n    revision 0x429 up to 0x430;\n  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at\n    revision 0x430;\n  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at\n    revision 0x430;\n  - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at\n    revision 0x429;\n  - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at\n    revision 0x429;\n  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in 06-9a-04) from\n    revision 0x429 up to 0x430;\n  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in 06-9e-09)\n    from revision 0xf0 up to 0xf4;\n  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in 06-9e-0a) from\n    revision 0xf0 up to 0xf4;\n  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in 06-9e-0b) from\n    revision 0xf0 up to 0xf4;\n  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in 06-9e-0c) from\n    revision 0xf0 up to 0xf4;\n  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in 06-9e-0d) from\n    revision 0xf4 up to 0xfa;\n  - Update of 06-a5-02/0x20 (CML-H R1) microcode (in 06-a5-02) from revision\n    0xf4 up to 0xf8;\n  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode (in 06-a5-03) from\n    revision 0xf4 up to 0xf8;\n  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode (in 06-a5-05) from\n    revision 0xf4 up to 0xf8;\n  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode (in 06-a6-00) from\n    revision 0xf4 up to 0xf8;\n  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode (in 06-a6-01) from\n    revision 0xf4 up to 0xf8;\n  - Update of 06-a7-01/0x02 (RKL-S B0) microcode (in 06-a7-01) from revision\n    0x57 up to 0x5d;\n  - Update of 06-b7-01/0x32 (RPL-S S0) microcode (in 06-b7-01) from revision\n    0x112 up to 0x11d;\n  - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at\n    revision 0x32;\n  - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at\n    revision 0x32;\n  - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at\n    revision 0x2c;\n  - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at\n    revision 0x2c;\n  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-bf-02) from\n    revision 0x2c up to 0x32;\n  - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-bf-02) from revision 0x2c\n    up to 0x32;\n  - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-bf-02) from revision 0x2c\n    up to 0x32;\n  - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at\n    revision 0x32;\n  - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at\n    revision 0x32;\n  - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at\n    revision 0x2c;\n  - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at\n    revision 0x2c;\n  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-bf-05) from\n    revision 0x2c up to 0x32;\n  - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-bf-05) from revision 0x2c\n    up to 0x32;\n  - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-bf-05) from revision 0x2c\n    up to 0x32;\n- gen_update2.py was updated to output strings having restricted length.","modified":"2026-06-01T00:33:17.351592477Z","published":"2023-12-01T15:32:04Z","upstream":["CVE-2022-40982","CVE-2022-41804","CVE-2023-23908","CVE-2023-23583"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/centos7-els/CLSA-2023-1701444720.html"}],"affected":[{"package":{"name":"microcode_ctl","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/microcode_ctl?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1-73.16.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2023-1701444720.json"}}],"schema_version":"1.7.5"}