Loading story…
Red Hat released RHSA-2024:9401 for Red Hat Enterprise Linux 9, updating microcode_ctl to 20240910-1.el9_5 across supported x86_64, EUS, AUS, SAP Solutions, and Extended Life Cycle channels. The advisory supplies Intel and AMD processor microcode and remediates seven Intel CPU flaws, including local privilege-escalation, information-disclosure, denial-of-service, race-condition, and processor-behavior issues.
Among the addressed vulnerabilities is CVE-2023-28746, a moderate-severity flaw affecting certain Intel Atom processors that permits local information disclosure and can compromise data confidentiality. Red Hat rates it CVSS 6.5, requiring local access but low privileges and no user interaction; RHEL 8 and 9 received kernel and microcode updates, while RHEL 7 is not affected. Organizations should deploy the applicable microcode_ctl and kernel updates, and treat unsupported RHEL 6 systems as potentially affected.
See real exploitation activity before you spend the cycle.
4 events from the most recent confirmed update back to the earliest known activity.
Red Hat released RHSA-2024:5101, fixing CVE-2023-28746 in the Red Hat Enterprise Linux 8 kernel.
Red Hat issued Moderate-severity advisory RHSA-2024:9401 for RHEL 9, shipping microcode_ctl-20240910-1.el9_5. The update remediates CVE-2023-28746 and six other Intel processor vulnerabilities.
Red Hat released RHSA-2024:8162 for the RHEL 9 kernel and RHSA-2024:8157 and RHSA-2024:8158 for RHEL 9.2 Extended Update Support kernel and kernel-rt packages, fixing CVE-2023-28746.
Red Hat released RHEA-2024:7620, providing a fixed microcode_ctl update for Red Hat Enterprise Linux 9 that addresses CVE-2023-28746.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released **RHSA-2024:11313** for Red Hat Enterprise Linux 9.4 support channels, updating the kernel to `5.14.0-427.49.1.el9_4`. The update remediates four vulnerabilities: **CVE-2021-47384**, a w83793 hardware-monitoring driver NULL-pointer dereference that can cause system instability; **CVE-2024-38627**, a double-free in STM device registration; **CVE-2024-39499**, a VMCI event-delivery speculative information-leak risk; and **CVE-2024-40989**, an ARM64 KVM teardown flaw that can leave vCPUs with dangling redistributor-region pointers. The advisory applies across supported RHEL 9.4 x86_64, ARM64, IBM Z/s390x, and Power little-endian deployments, including EUS, AUS, SAP Update Services, and Extended Life Cycle channels. Red Hat rates the advisory Moderate; the w83793 flaw has a CVSS 3.1 score of 5.5 and requires local, low-privileged access, while the other fixes address memory-safety, speculative-execution, and virtualization risks. Organizations should deploy the updated kernel packages and reboot affected systems for the fixes to take effect.
Aug 26, 2026
Red Hat released kernel and `linux-firmware` updates across supported RHEL 7, 8, and 9 streams to address two AMD processor side-channel flaws: **CVE-2023-20593** (Zenbleed) and **CVE-2023-20569** (Inception/RAS Poisoning). Zenbleed affects AMD Zen 2 processors and may expose data left in YMM registers by another process or thread; Inception can let a local attacker manipulate return-address prediction and induce speculative execution that discloses information. Both issues require local, low-privilege access and primarily affect confidentiality. The remediation includes AMD microcode delivered through updated `linux-firmware` packages and, for applicable RHEL streams, kernel updates. Red Hat issued `linux-firmware-20200421-81.git78c0348.el7_9` for RHEL 7 and `linux-firmware-20180911-69.2.git85c5d90.el7_6` for RHEL Server AUS 7.6; RHEL 9.0 EUS kernel `5.14.0-70.80.1.el9_0` also includes fixes for the AMD flaws alongside other kernel vulnerabilities. Administrators should apply the relevant supported-channel updates and reboot systems after kernel installation so protections take effect.
Aug 26, 2026
Red Hat released **RHSA-2024:8162**, a Moderate-severity update for Red Hat Enterprise Linux 9, remediating 14 Linux-kernel vulnerabilities across standard RHEL 9 and associated EUS, ELS, SAP, and CodeReady Linux Builder offerings. The fixes address issues including local information disclosure on Intel Atom processors, an out-of-bounds write in `sch_multiq`, a use-after-free condition in the Ionic driver, and several NULL-pointer dereference and networking flaws, including `CVE-2023-52658`, `CVE-2021-47385`, and `CVE-2024-35989`. Affected systems span x86_64, aarch64, ppc64le, and s390x architectures; administrators must reboot after installing the updated kernel. Red Hat also published refreshed RHEL 9 container images under RHBA-2024:8242, RHBA-2024:8412, RHBA-2024:8441, and RHBA-2024:8578, backporting the RHSA-2024:8162 kernel security fixes into UBI-derived, language-runtime, S2I, support-tools, and Go Toolset images. Organizations should pull the revised images from the Red Hat Container Registry, update base-image references in Dockerfiles and build scripts, and rebuild and redeploy all dependent container images.
Aug 26, 2026