Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 66 articles for you...
172
security advisoryUbuntuimportantUbuntu 25.10 AMD Microcode Critical Data Exposure Vulnerability USN-8475-1
Several security issues were fixed in AMD Microcode.. ========================================================================== Ubuntu Security Notice USN-8475-1 June 25, 2026 amd64-microcode vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS Summary: Several security issues were fixed in AMD Microcode. Software Description: - amd64-microcode: Platform firmware and microcode for AMD CPUs and SoCs Details: Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 amd64-microcode 3.20251202.1ubuntu0.25.10.1 Ubuntu 24.04 LTS amd64-microcode 3.20251202.1ubuntu0.24.04.1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: For the most comprehensive protection, users should update their system BIOS/UEFI to the latest version provided by their hardware vendor. If the BIOS has not been updated, this microcode update will apply the latest available mitigations that can be delivered via the operating system. For more information, pleasesee: https://ubuntu.com/security/vulnerabilities/entrysign References: https://ubuntu.com/security/notices/USN-8475-1 CVE-2024-36350, CVE-2024-36357, CVE-2025-62626 Package Information: https://launchpad.net/ubuntu/+source/amd64-microcode/3.20251202.1ubuntu0.25.10.1 https://launchpad.net/ubuntu/+source/amd64-microcode/3.20251202.1ubuntu0.24.04.1 . Update your Ubuntu systems to patch critical AMD Microcode vulnerabilities leading to data leaks and integrity issues.. Ubuntu Security Update, AMD Microcode, Confidentiality Loss. . Severity: Important. LinuxSecurity.com Team
Jun 25, 2026
•Important
Ubuntu
100
security advisorySuSEprivilege escalationSUSE Linux Micro 6.1 Alert Update SUSE-SU-2026-30785-4 Threat Level Raised
An update that solves two vulnerabilities can now be installed.. # Security update for ucode-intel Announcement ID: SUSE-SU-2026:20682-1 Release Date: 2026-03-06T13:29:07Z Rating: important References: * bsc#1229129 * bsc#1258046 Cross-References: * CVE-2024-24853 * CVE-2025-31648 CVSS scores: * CVE-2024-24853 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2024-24853 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H * CVE-2025-31648 ( SUSE ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-31648 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N * CVE-2025-31648 ( NVD ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-31648 ( NVD ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves two vulnerabilities can now be installed. ## Description: This update for ucode-intel fixes the following issues: * Intel CPU Microcode was updated to the 20260210 release (bsc#1258046): * CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access (bsc#1229129). * CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege (bsc#1258046). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-430=1 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * ucode-intel-20260210-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24853.html * https://www.suse.com/security/cve/CVE-2025-31648.html * https://bugzilla.suse.com/show_bug.cgi?id=1229129 * https://bugzilla.suse.com/show_bug.cgi?id=1258046 . Update for SUSE ucode-intel addresses critical issues allowing privilege escalation. Follow for instructions on patch installation.. SUSE Linux Micro, ucode-intel update, privilege escalation risk, security patch. . Severity: Important. LinuxSecurity.com Team
Mar 18, 2026
•Important
SuSE
100
security advisorySuSEimportantSUSE Linux 12 SP5 ucode-intel Important Escalation Vuln 2026-0669-1
An update that solves two vulnerabilities can now be installed.. # Security update for ucode-intel Announcement ID: SUSE-SU-2026:0669-1 Release Date: 2026-02-26T15:21:32Z Rating: important References: * bsc#1229129 * bsc#1258046 Cross-References: * CVE-2024-24853 * CVE-2025-31648 CVSS scores: * CVE-2024-24853 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2024-24853 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H * CVE-2025-31648 ( SUSE ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-31648 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N * CVE-2025-31648 ( NVD ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-31648 ( NVD ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for ucode-intel fixes the following issues: * Intel CPU Microcode was updated to the 20260210 release (bsc#1258046) * CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access. (bsc#1229129) * CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege. (bsc#1258046) ## SpecialInstructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-669=1 * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-669=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * ucode-intel-20260210-158.1 * ucode-intel-debugsource-20260210-158.1 * ucode-intel-debuginfo-20260210-158.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (x86_64) * ucode-intel-20260210-158.1 * ucode-intel-debugsource-20260210-158.1 * ucode-intel-debuginfo-20260210-158.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24853.html * https://www.suse.com/security/cve/CVE-2025-31648.html * https://bugzilla.suse.com/show_bug.cgi?id=1229129 * https://bugzilla.suse.com/show_bug.cgi?id=1258046 . SUSE updates ucode-intel to fix two important vulnerabilities. Install promptly to secure your systems!. ucode-intel, SUSE, vulnerability fix, escalation of privilege. . Severity: Important. LinuxSecurity.com Team
Feb 26, 2026
•Important
SuSE
203
security advisorylocal accessescalationMageia 9 Microcode Update Critical Escalation Fix MGASA-2026-0043
MGASA-2026-0043 - Updated microcode packages fix security vulnerabilities. MGASA-2026-0043 - Updated microcode packages fix security vulnerabilities Publication date: 18 Feb 2026 URL: https://advisories.mageia.org/MGASA-2026-0043.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-24853, CVE-2025-31648 Description: The updated package updates AMD CPUs microcodes and fixes security vulnerabilities in Intel CPUs microcodes: Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24853) Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts. (CVE-2025-31648) References: - https://bugs.mageia.org/show_bug.cgi?id=35130 - https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260210-rev1 - https://www.cve.org/CVERecord?id=CVE-2024-24853 - https://www.cve.org/CVERecord?id=CVE-2025-31648 SRPMS: - 9/nonfree/microcode-0.20260210-1.mga9.nonfree . Mageia updates microcode packages addressing security issues in Intel CPUs, critical for system integrity and access escalation.. Mageia Microcode Update, CPU Security Fix, Intel Privilege Escalation, AMD Microcode, Mageia Security Advisory. . Severity: Critical. LinuxSecurity.com Team
Feb 18, 2026
•Critical
Mageia
100
security advisoryupdateSuSEFedora Linux 37 firmware-update Security Advisory RPM-SEC-2025-20320-3
# Security update for ucode-amd Announcement ID: SUSE-SU-2026:20203-1 Release Date: 2026-01-28T16:01:59Z Rating: important References:. # Security update for ucode-amd Announcement ID: SUSE-SU-2026:20203-1 Release Date: 2026-01-28T16:01:59Z Rating: important References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP Applications 16.0 An update that can now be installed. ## Description: This update for ucode-amd fixes the following issues: Changes in ucode-amd: * Update to version 20251203 (git commit a0f0e52138e5): * linux-firmware: Update amd-ucode copyright information * linux-firmware: Update AMD cpu microcode * Update to version 20251113 (git commit fb0dbcd30118): * linux-firmware: Update AMD cpu microcode * Update to version 20251031 (git commit 04b323bb64f9): * linux-firmware: Update AMD cpu microcode * Update to version 20251028 (git commit 4f72031fc195): * linux-firmware: Update AMD cpu microcode * Update to version 20251024 (git commit 9b899c779b8a): * amd-ucode: Fix minimum revisions in README * Update to version 20250730 (git commit 910c19074091): * linux-firmware: Update AMD cpu microcode ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-209=1 * SUSE Linux Enterprise Server for SAP Applications 16.0 zypper in -t patch SUSE-SLES-16.0-209=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (noarch) * ucode-amd-20251203-160000.1.1 * SUSE Linux Enterprise Server for SAP Applications 16.0 (noarch) * ucode-amd-20251203-160000.1.1 . SUSE releases important security update for ucode-amd addressing multiple AMD CPU microcode issues. Update recommended.. SUSE ucode-amd update security patch microcode. . Severity: Important.LinuxSecurity.com Team
Feb 03, 2026
•Important
SuSE
202
security advisorysecurity updateimportantopenSUSE Leap 16.2 ucode-intel Important Update Notification for Users
An update that solves various issues can now be installed.. openSUSE security update: security update for ucode-amd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20124-1 Rating: important Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves various issues can now be installed. Description: This update for ucode-amd fixes the following issues: Changes in ucode-amd: - Update to version 20251203 (git commit a0f0e52138e5): * linux-firmware: Update amd-ucode copyright information * linux-firmware: Update AMD cpu microcode - Update to version 20251113 (git commit fb0dbcd30118): * linux-firmware: Update AMD cpu microcode - Update to version 20251031 (git commit 04b323bb64f9): * linux-firmware: Update AMD cpu microcode - Update to version 20251028 (git commit 4f72031fc195): * linux-firmware: Update AMD cpu microcode - Update to version 20251024 (git commit 9b899c779b8a): * amd-ucode: Fix minimum revisions in README - Update to version 20250730 (git commit 910c19074091): * linux-firmware: Update AMD cpu microcode Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-209=1 Package List: - openSUSE Leap 16.0: ucode-amd-20251203-160000.1.1 . Critical update for ucode-amd fixes important issues in openSUSE Leap 16.0. Install recommended patches now.. openSUSE security patch, ucode-amd update, AMD microcode patch. . Severity: Important. LinuxSecurity.com Team
Feb 03, 2026
•Important
OpenSUSE
203
security advisoryIntelbugfixMageia 9: Advisory for Microcode Bugfix MGAA-2025-0101 Released Now
MGAA-2025-0101 - Updated microcode packages fix bugs. MGAA-2025-0101 - Updated microcode packages fix bugs Publication date: 28 Nov 2025 URL: https://advisories.mageia.org/MGAA-2025-0101.html Type: bugfix Affected Mageia releases: 9 Description: This package updates Intel and AMD CPU microcode. References: - https://bugs.mageia.org/show_bug.cgi?id=34768 - https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20251111 - https://web.git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/amd-ucode?id=6167e5566900cf236f7a69704e8f4c441bc7212a SRPMS: - 9/nonfree/microcode-0.20251111-1.mga9.nonfree . Updated Intel and AMD microcode packages in Mageia fixed bugs enhancing system stability and performance. . Mageia microcode update bugfix Intel AMD. . Severity: Informational. LinuxSecurity.com Team
Nov 28, 2025
•Informational
Mageia
172
security advisorybuffer overflowcriticalUbuntu: Intel Microcode Critical Escalation Threat USN-7866-1
Several security issues were fixed in Intel Microcode.. ========================================================================== Ubuntu Security Notice USN-7866-1 November 10, 2025 intel-microcode vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in Intel Microcode. Software Description: - intel-microcode: Processor microcode for Intel CPUs Details: Barak Gross discovered that some Intel® Xeon® processors with SGX enabled did not properly handle buffer restrictions. A local authenticated user could potentially use this issue to escalate their privileges. (CVE-2025-20053) Avinash Maddy discovered that some Intel® processors did not properly isolate or compartmentalize the stream cache mechanisms. A local authenticated user could potentially use this issue to escalate their privileges. (CVE-2025-20109) Joseph Nuzman discovered that some Intel® Xeon® processors did not properly manage references to active allocate resources. A local authenticated user could potentially use this issue to cause a denial of service (system crash). (CVE-2025-21090) It was discovered that some Intel® Xeon® 6 processors did not properly provide sufficient granularity of access control in the out of band management service module (OOB-MSM). An authenticated user could potentially use this issue to escalate their privileges. (CVE-2025-22839) It was discovered that some Intel® Xeon® 6 Scalable processors did not properly handle a specific sequence of processor instructions, leading to unexpected behavior. A local authenticated user could potentially use this issue to escalate their privileges. (CVE-2025-22840) Joseph Nuzman discovered that some Intel® Xeon® 6 processors with Intel® Trust Domain Extensions (Intel® TDX) did not properlyhandle overlap between protected memory ranges. A local authenticated user could potentially use this issue to escalate their privileges. (CVE-2025-22889) Avraham Shalev discovered that some Intel® Xeon® processors did not properly provide sufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware. A local authenticated user could potentially use this issue to escalate their privileges. (CVE-2025-24305) Aviv Eisen and Avraham Shalev discovered that some Intel® Xeon® 6 processors when using Intel® SGX or Intel® TDX did not properly protect against out-of-bounds writes in the memory subsystem. A local authenticated user could potentially use this issue to escalate their privileges. (CVE-2025-26403) Aviv Eisen and Avraham Shalev discovered that some Intel® Xeon® 6 processors when using Intel® SGX or Intel® TDX did not properly implement security checks in the DDRIO configuration. A local authenticated user could potentially use this issue to escalate their privileges. (CVE-2025-32086) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 intel-microcode 3.20250812.0ubuntu0.25.10.1 Ubuntu 25.04 intel-microcode 3.20250812.0ubuntu0.25.04.1 Ubuntu 24.04 LTS intel-microcode 3.20250812.0ubuntu0.24.04.1 Ubuntu 22.04 LTS intel-microcode 3.20250812.0ubuntu0.22.04.1 Ubuntu 20.04 LTS intel-microcode 3.20250812.0ubuntu0.20.04.1+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS intel-microcode 3.20250812.0ubuntu0.18.04.1+esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS intel-microcode 3.20250812.0ubuntu0.16.04.1+esm1 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7866-1 CVE-2025-20053, CVE-2025-20109, CVE-2025-21090, CVE-2025-22839, CVE-2025-22840, CVE-2025-22889, CVE-2025-24305, CVE-2025-26403, CVE-2025-32086 Package Information: https://launchpad.net/ubuntu/+source/intel-microcode/3.20250812.0ubuntu0.25.10.1 https://launchpad.net/ubuntu/+source/intel-microcode/3.20250812.0ubuntu0.25.04.1 https://launchpad.net/ubuntu/+source/intel-microcode/3.20250812.0ubuntu0.24.04.1 https://launchpad.net/ubuntu/+source/intel-microcode/3.20250812.0ubuntu0.22.04.1 . Fixes for critical issues in Intel microcode across multiple Ubuntu releases. Essential updates for privilege escalation risks.. ubuntu security, intel microcode, privilege escalation, system crash, security patching. . Severity: Critical. LinuxSecurity.com Team
Nov 11, 2025
•Critical
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!