ELSA-2026-65147-0 - microcode_ctl security, bug fix, and enhancement update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-09-16 |
Description
[4:20260812-1.0.3]
- disable late update for 06-ad-01
- add support for UEK7/UEK8 and ueknext kernels
- don't bother calling dracut if virtualized [Orabug: 35710077]
- ensure UEK also rebuilds initramfs [Orabug: 34280058]
- add support for UEK7 kernels
- enable early update for 06-4f-01
- remove no longer appropriate caveats for 06-2d-07 and 06-55-04
- enable early and late load on RHCK
[4:20260812-1]
- Update Intel CPU microcode to microcode-20260812 release (RHEL-240770)
- Security advisories:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html
CVE-2025-31936
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01404.html
CVE-2025-31938
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01423.html
CVE-2026-20917
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01428.html
CVE-2025-35973
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01435.html
CVE-2026-20716
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01441.html
CVE-2026-20760
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.html
CVE-2026-20713, CVE-2026-20901
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01443.html
CVE-2026-20707
- New microcode files (in hex):
06-b7-04: Raptor Lake: revision 0137
06-d5-01: Wildcat Lake: revision 000c
06-d7-00: Bartlett Lake: revision 0137
- Microcode files (/platform_mask shown) with revision updates (in hex):
06-6a-06/87: Ice Lake-X: d000421 to d000433
06-6c-01/10: Ice Lake-D: 10002f1 to 1000301
06-7e-05/80: Ice Lake-L: 00cc to 00ce
06-8f-07/87: Sapphire Rapids: 2b000670 to 2b000685
06-8f-08/10: Sapphire Rapids with HBM: 2c000421 to 2c000435
06-8f-08/87: Sapphire Rapids: 2b000670 to 2b000685
06-a7-01/02: Rocket Lake: 0065 to 0066
06-ad-01/20: Granite Rapids-X: a000142 to a000151
06-ad-01/95: Granite Rapids-X: 1000423 to 1000434
06-ae-01/97: Granite Rapids-D: 1000307 to 1000309
06-af-03/01: Crestmont (Sierra Forest): 30003a3 to 30003b2
06-b5-00/80: Arrow Lake-U: 000d to 000e
06-b7-01/36: Raptor Lake: 0133 to 0137, platform bit 04 added
06-bd-01/80: Lunar Lake: 0126 to 0128
06-c5-02/82: Arrow Lake-H: 0121 to 0122
06-c6-02/82: Arrow Lake: 0121 to 0122
06-cc-02/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02
06-cc-03/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02
06-cf-02/87: Emerald Rapids: 210002e0 to 210002f4
Resolves: RHEL-240770
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
|
| Oracle Linux 8 (x86_64) | microcode_ctl-20260812-1.0.3.el8_10.src.rpm | 4f67923da85894b5d7a2c674349ec739491dd5817d3c061cc1e81438bde45b47 | - | ol8_x86_64_baseos_latest |
| microcode_ctl-20260812-1.0.3.el8_10.src.rpm | 4f67923da85894b5d7a2c674349ec739491dd5817d3c061cc1e81438bde45b47 | - | ol8_x86_64_u10_baseos_patch |
| microcode_ctl-20260812-1.0.3.el8_10.x86_64.rpm | 980454f1d87248c2ddd4dd2949c20f4fadf366281f4e7427331b34b847ef2ded | - | ol8_x86_64_baseos_latest |
| microcode_ctl-20260812-1.0.3.el8_10.x86_64.rpm | 980454f1d87248c2ddd4dd2949c20f4fadf366281f4e7427331b34b847ef2ded | - | ol8_x86_64_u10_baseos_patch |
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team
