CentOS 6 ELS: microcode_ctl package with the fix for several CVEs gradual rollout - TuxCare

Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Go straight to an AI summary of this blog post instead

  • Summarize this post with Perplexity
  • Summarize this post with Gemini

A new updated microcode_ctl package with the fix for several CVEs within CentOS 6 ELS has been scheduled for gradual rollout from our production repository.

 

Rollout slot: 2
Rolled out to: 0.1%
ETA for 100% rollout: September 21

CHANGELOG

SVEs list:

  • CVE-2021-24489
  • CVE-2020-24511
  • CVE-2020-24512
  • CVE-2020-24513

microcode_ctl-1.17-33.34.el6.cloudlinux.els

  • Fix incomplete cleanup in some Intel(R) VT-d products (CVE-2020-24489)
  • Fix improper isolation of shared resources in some Intel(R) Processors (CVE-2020-24511)
  • Fix observable timing discrepancy in some Intel(R) Processors (CVE-2020-24512)
  • Fix domain-bypass transient execution vulnerability in some Intel Atom(R) Processors (CVE-2020-24513)

UPDATE COMMAND

yum update microcode_ctl*

IMMEDIATE UPDATE (VIA BYPASS)

yum update microcode_ctl* --enablerepo=ELS6-rollout-2-bypass

Join 4,500+ Linux & Open Source Professionals!

2x a month. No spam.

Table of Contents
Get the open-source security answers you need
Ask Us a Question

Join 4,500+ Linux & Open Source Professionals!

2x a month. No spam.