MGASA-2024-0025

    Dashboard / Vulnerabilities / MGASA-2024-0025

    MGASA-2024-0025

    Published: 4 Feb 2024Last Modified: 16 Apr 2026

    Summary: Updated dracut package fixes enabling microcode

    Details: The updated package fixes enabling early microcode on kernels 6.6+. On affected systems, CPU microcode updates were not loaded. CPU microcode updates are sometimes necessary in order to address important security vulnerabilities. If CPU microcode updates are not properly loaded, these security vulnerabilities may remain exploitable.

    References: https://advisories.mageia.org/MGASA-2024-0025.html, https://bugs.mageia.org/show_bug.cgi?id=32791, https://www.qubes-os.org/news/2023/12/15/qsb-098/, https://github.com/dracutdevs/dracut/commit/6c80408c8644a0add1907b0593eb83f90d6247b1

    Affected packages

    Package

    Name: dracut

    Purl: pkg:rpm/mageia/dracut?arch=source&distro=mageia-9

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -057-4.1.mga9

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High