ELSA-2026-68011

ELSA-2026-68011 - microcode_ctl security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-12

Description

[20260812-1.0.2]
- disable late update for 06-ad-01

[20260812-1.0.1]
- add support for UEK7/UEK8 and ueknext kernels
- don't bother calling dracut if virtualized [Orabug: 35710094]
- ensure UEK also rebuilds initramfs [Orabug: 34280058]
- enable early update for 06-4f-01
- remove no longer appropriate caveats for 06-2d-07 and 06-55-04
- enable early and late load on RHCK

[4:20260812-1]
- Update Intel CPU microcode to microcode-20260812 release (RHEL-240771)
- Security advisories:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html
CVE-2025-31936
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01404.html
CVE-2025-31938
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01423.html
CVE-2026-20917
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01428.html
CVE-2025-35973
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01435.html
CVE-2026-20716
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01441.html
CVE-2026-20760
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.html
CVE-2026-20713, CVE-2026-20901
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01443.html
CVE-2026-20707
- New microcode files (in hex):
06-b7-04: Raptor Lake: revision 0137
06-cc-02: Panther Lake: revision 011c
06-cc-03: Panther Lake: revision 011c
06-d5-01: Wildcat Lake: revision 000c
06-d7-00: Bartlett Lake: revision 0137
- Microcode files (/platform_mask shown) with revision updates (in hex):
06-6a-06/87: Ice Lake-X: d000421 to d000433
06-6c-01/10: Ice Lake-D: 10002f1 to 1000301
06-7e-05/80: Ice Lake-L: 00cc to 00ce
06-8f-07/87: Sapphire Rapids: 2b000661 to 2b000685
06-8f-08/10: Sapphire Rapids with HBM: 2c000421 to 2c000435
06-8f-08/87: Sapphire Rapids: 2b000661 to 2b000685
06-a7-01/02: Rocket Lake: 0065 to 0066
06-ad-01/20: Granite Rapids-X: a000133 to a000151
06-ad-01/95: Granite Rapids-X: 1000405 to 1000434
06-ae-01/97: Granite Rapids-D: 10002f3 to 1000309
06-af-03/01: Crestmont (Sierra Forest): 3000382 to 30003b2
06-b5-00/80: Arrow Lake-U: 000d to 000e
06-b7-01/36: Raptor Lake: 0133 to 0137, platform bit 04 added
06-bd-01/80: Lunar Lake: 0125 to 0128
06-c5-02/82: Arrow Lake-H: 011b to 0122
06-c6-02/82: Arrow Lake: 011b to 0122
06-cf-02/87: Emerald Rapids: 210002d3 to 210002f4

Related CVEs

CVE-2025-31936

CVE-2025-35973

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	microcode_ctl-20260812-1.0.2.el9_8.src.rpm	faa644aaa27a46005008e1c0d478097110a3811d9ff7ab36aa4f659d2ca9dd2f	-	ol9_aarch64_baseos_latest
	microcode_ctl-20260812-1.0.2.el9_8.src.rpm	faa644aaa27a46005008e1c0d478097110a3811d9ff7ab36aa4f659d2ca9dd2f	-	ol9_aarch64_u8_baseos_patch
Oracle Linux 9 (x86_64)	microcode_ctl-20260812-1.0.2.el9_8.src.rpm	faa644aaa27a46005008e1c0d478097110a3811d9ff7ab36aa4f659d2ca9dd2f	-	ol9_x86_64_baseos_latest
	microcode_ctl-20260812-1.0.2.el9_8.src.rpm	faa644aaa27a46005008e1c0d478097110a3811d9ff7ab36aa4f659d2ca9dd2f	-	ol9_x86_64_u8_baseos_patch
	microcode_ctl-20260812-1.0.2.el9_8.noarch.rpm	128016e618e4a0dd79f5a40887aa88957d44180f1723e897c3a61de0757e18aa	-	ol9_x86_64_baseos_latest
	microcode_ctl-20260812-1.0.2.el9_8.noarch.rpm	128016e618e4a0dd79f5a40887aa88957d44180f1723e897c3a61de0757e18aa	-	ol9_x86_64_u8_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team