RLSA-2026:97521: Important: microcode_ctl security, bug fix, and enhancement update
The microcodectl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
Bug Fix(es) and Enhancement(s):
[Rocky Linux 9] Update Intel CPU microcode to the latest version (JIRA:Rocky Linux-240771)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/microcode_ctlto a version that resolves this vulnerability.Fixed in 4:20260812-1.el9
Event History
Frequently Asked Questions
What access would an attacker need to exploit the security issue?
The CVSS vector indicates local access, high privileges, and high attack complexity are required. No user interaction is required.
Which systems are relevant to this security fix?
The security issue is identified as affecting Intel processors in a kernel hypervisor context. This advisory also updates Intel CPU microcode for Rocky Linux 9.