RHEA-2018:2296 - Product Enhancement Advisory

Topic

Updated microcode_ctl packages that add one enhancement are now available for Red Hat Enterprise Linux 7.3 Extended Update Support.

Description

The microcode_ctl packages provide microcode updates for Intel and AMD processors.

This update adds the following enhancement:

• The Intel CPU microcode has been updated to the latest upstream version, which also provides new capabilities used by the Linux kernel to mitigate CVE-2018-3639, known as the Speculative Store Bypass vulnerability.

This update includes also microcode for Intel Xeon Processor E5 v4 and Intel Xeon Processor E7 v4; Core i7-69xx/68xx, family 6, model 0x4f,
stepping 0x1.

(BZ#1573453, BZ#1576332)

Users of microcode_ctl are advised to upgrade to these updated packages, which add this enhancement.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Note: a system reboot is necessary for this update to take effect.

Affected Products

• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64

Fixes

• BZ - 1576332 - [RHEL-7] Include updated ucode for Broadwell EP/EX [rhel-7.3.z]

CVEs

(none)

References

• https://access.redhat.com/security/vulnerabilities/ssbd