vulnerability

Oracle Linux: CVE-2024-31157: ELSA-2025-7043: microcode_ctl security update (MODERATE)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:M/C:C/I:N/A:N)

Published

Feb 12, 2025

Added

May 26, 2025

Modified

Jul 17, 2025

Description

Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

Solution

oracle-linux-upgrade-microcode-ctl

References

CVE-2024-31157
https://attackerkb.com/topics/CVE-2024-31157
ELSA-ELSA-2025-7043
CWE-665

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report