{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"High" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"microcode_ctl security update", "category":"general", "title":"Synopsis" }, { "text":"An update for microcode_ctl is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4", "category":"general", "title":"Summary" }, { "text":"This is a tool to transform and deploy microcode update for x86 CPUs.\n\nSecurity Fix(es):\n\nImproper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.(CVE-2025-31936)\n\nInsufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.(CVE-2025-31938)\n\nImproper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.(CVE-2025-35973)\n\nHardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.(CVE-2026-20707)\n\nAlways-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.(CVE-2026-20713)\n\nImproper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.(CVE-2026-20716)\n\nImproper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.(CVE-2026-20760)\n\nImproper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.(CVE-2026-20901)\n\nExposure of sensitive information caused by incorrect data forwarding during transient execution for some Intel(R) Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.(CVE-2026-20917)", "category":"general", "title":"Description" }, { "text":"An update for microcode_ctl is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"High", "category":"general", "title":"Severity" }, { "text":"microcode_ctl", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2026-3408", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3408" }, { "summary":"CVE-2025-31936", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-31936&packageName=microcode_ctl" }, { "summary":"CVE-2025-31938", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-31938&packageName=microcode_ctl" }, { "summary":"CVE-2025-35973", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-35973&packageName=microcode_ctl" }, { "summary":"CVE-2026-20707", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-20707&packageName=microcode_ctl" }, { "summary":"CVE-2026-20713", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-20713&packageName=microcode_ctl" }, { "summary":"CVE-2026-20716", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-20716&packageName=microcode_ctl" }, { "summary":"CVE-2026-20760", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-20760&packageName=microcode_ctl" }, { "summary":"CVE-2026-20901", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-20901&packageName=microcode_ctl" }, { "summary":"CVE-2026-20917", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-20917&packageName=microcode_ctl" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31936" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31938" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-35973" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20707" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20713" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20716" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20760" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20901" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20917" }, { "summary":"openEuler-SA-2026-3408 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-3408.json" } ], "title":"An update for microcode_ctl is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4", "tracking":{ "initial_release_date":"2026-08-26T11:02:14+08:00", "revision_history":[ { "date":"2026-08-26T11:02:14+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-08-26T11:02:14+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-08-26T11:02:14+08:00", "id":"openEuler-SA-2026-3408", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"openEuler-20.03-LTS-SP4", "name":"openEuler-20.03-LTS-SP4" }, "name":"openEuler-20.03-LTS-SP4", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"openEuler-22.03-LTS-SP4", "name":"openEuler-22.03-LTS-SP4" }, "name":"openEuler-22.03-LTS-SP4", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"openEuler-24.03-LTS-SP1", "name":"openEuler-24.03-LTS-SP1" }, "name":"openEuler-24.03-LTS-SP1", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"openEuler-24.03-LTS-SP3", "name":"openEuler-24.03-LTS-SP3" }, "name":"openEuler-24.03-LTS-SP3", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4" }, "product_id":"openEuler-24.03-LTS-SP4", "name":"openEuler-24.03-LTS-SP4" }, "name":"openEuler-24.03-LTS-SP4", "category":"product_version" } ], "category":"product_name" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"microcode_ctl-20260811-1.oe2003sp4.src.rpm", "name":"microcode_ctl-20260811-1.oe2003sp4.src.rpm" }, "name":"microcode_ctl-20260811-1.oe2003sp4.src.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"microcode_ctl-20260811-1.oe2203sp4.src.rpm", "name":"microcode_ctl-20260811-1.oe2203sp4.src.rpm" }, "name":"microcode_ctl-20260811-1.oe2203sp4.src.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"microcode_ctl-20260811-1.oe2403sp1.src.rpm", "name":"microcode_ctl-20260811-1.oe2403sp1.src.rpm" }, "name":"microcode_ctl-20260811-1.oe2403sp1.src.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"microcode_ctl-20260811-1.oe2403sp3.src.rpm", "name":"microcode_ctl-20260811-1.oe2403sp3.src.rpm" }, "name":"microcode_ctl-20260811-1.oe2403sp3.src.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4" }, "product_id":"microcode_ctl-20260811-1.oe2403sp4.src.rpm", "name":"microcode_ctl-20260811-1.oe2403sp4.src.rpm" }, "name":"microcode_ctl-20260811-1.oe2403sp4.src.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"microcode_ctl-20260811-1.oe2003sp4.x86_64.rpm", "name":"microcode_ctl-20260811-1.oe2003sp4.x86_64.rpm" }, "name":"microcode_ctl-20260811-1.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"microcode_ctl-20260811-1.oe2203sp4.x86_64.rpm", "name":"microcode_ctl-20260811-1.oe2203sp4.x86_64.rpm" }, "name":"microcode_ctl-20260811-1.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"microcode_ctl-20260811-1.oe2403sp1.x86_64.rpm", "name":"microcode_ctl-20260811-1.oe2403sp1.x86_64.rpm" }, "name":"microcode_ctl-20260811-1.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"microcode_ctl-20260811-1.oe2403sp3.x86_64.rpm", "name":"microcode_ctl-20260811-1.oe2403sp3.x86_64.rpm" }, "name":"microcode_ctl-20260811-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4" }, "product_id":"microcode_ctl-20260811-1.oe2403sp4.x86_64.rpm", "name":"microcode_ctl-20260811-1.oe2403sp4.x86_64.rpm" }, "name":"microcode_ctl-20260811-1.oe2403sp4.x86_64.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"microcode_ctl-20260811-1.oe2003sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "name":"microcode_ctl-20260811-1.oe2003sp4.src as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"microcode_ctl-20260811-1.oe2203sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "name":"microcode_ctl-20260811-1.oe2203sp4.src as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"microcode_ctl-20260811-1.oe2403sp1.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "name":"microcode_ctl-20260811-1.oe2403sp1.src as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"microcode_ctl-20260811-1.oe2403sp3.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "name":"microcode_ctl-20260811-1.oe2403sp3.src as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP4", "product_reference":"microcode_ctl-20260811-1.oe2403sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "name":"microcode_ctl-20260811-1.oe2403sp4.src as a component of openEuler-24.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"microcode_ctl-20260811-1.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "name":"microcode_ctl-20260811-1.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"microcode_ctl-20260811-1.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "name":"microcode_ctl-20260811-1.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"microcode_ctl-20260811-1.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "name":"microcode_ctl-20260811-1.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"microcode_ctl-20260811-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "name":"microcode_ctl-20260811-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP4", "product_reference":"microcode_ctl-20260811-1.oe2403sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64", "name":"microcode_ctl-20260811-1.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2025-31936", "notes":[ { "text":"Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ], "details":"microcode_ctl security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3408" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.0, "vectorString":"CVSS:3.1/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2025-31936" }, { "cve":"CVE-2025-31938", "notes":[ { "text":"Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ], "details":"microcode_ctl security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3408" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.3, "vectorString":"CVSS:3.1/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2025-31938" }, { "cve":"CVE-2025-35973", "notes":[ { "text":"Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ], "details":"microcode_ctl security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3408" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.5, "vectorString":"CVSS:3.1/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2025-35973" }, { "cve":"CVE-2026-20707", "notes":[ { "text":"Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ], "details":"microcode_ctl security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3408" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.8, "vectorString":"CVSS:3.1/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-20707" }, { "cve":"CVE-2026-20713", "notes":[ { "text":"Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ], "details":"microcode_ctl security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3408" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.5, "vectorString":"CVSS:3.1/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-20713" }, { "cve":"CVE-2026-20716", "notes":[ { "text":"Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ], "details":"microcode_ctl security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3408" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.2, "vectorString":"CVSS:3.1/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-20716" }, { "cve":"CVE-2026-20760", "notes":[ { "text":"Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ], "details":"microcode_ctl security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3408" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.8, "vectorString":"CVSS:3.1/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-20760" }, { "cve":"CVE-2026-20901", "notes":[ { "text":"Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ], "details":"microcode_ctl security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3408" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.0, "vectorString":"CVSS:3.1/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-20901" }, { "cve":"CVE-2026-20917", "notes":[ { "text":"Exposure of sensitive information caused by incorrect data forwarding during transient execution for some Intel(R) Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ], "details":"microcode_ctl security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3408" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.0, "vectorString":"CVSS:3.1/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.src", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.src", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.src", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.src", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.src", "openEuler-20.03-LTS-SP4:microcode_ctl-20260811-1.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:microcode_ctl-20260811-1.oe2203sp4.x86_64", "openEuler-24.03-LTS-SP1:microcode_ctl-20260811-1.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:microcode_ctl-20260811-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP4:microcode_ctl-20260811-1.oe2403sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-20917" } ] }