CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

sysutils/cpu-microcode-intel20260925

Intel CPU microcode updates

Maintainer
jrm@FreeBSD.org
Packages
cpu-microcode-intel 20260925
Upstream
up to date
CPE
intel:microcode from the port
WWW
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (6)

Show 6 fixed
VuXML entries whose affected range this version has left.

Commits (24)

Joseph Mingrone (jrm) · 20260925
sysutils/cpu-microcode-intel: Update to 2026-09-25 release

This update includes a functional fix for Meteor Lake (06-aa-04/e6,
stepping C0) Core Ultra processors.

Release notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260925
Sponsored by:	The FreeBSD Foundation
572e374216
Joseph Mingrone (jrm) · 20260812
sysutils/cpu-microcode-intel: Update to 2026-08-12 release

Roll back Meteor Lake (06-aa-04, stepping C0) microcode update to what
was included before the 2026-08-11 release due to functional issues.

Release notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260812
Sponsored by:	The FreeBSD Foundation
802f9321f5
Joseph Mingrone (jrm) · 20260811
sysutils/cpu-microcode-intel: Update to 2026-08-11 release

This update includes security fixes for INTEL-SA-01379, INTEL-SA-01404,
INTEL-SA-01423, INTEL-SA-01428, INTEL-SA-01435, INTEL-SA-01441,
INTEL-SA-01442, and INTEL-SA-01443, affecting various Core, Core Ultra,
and Xeon processors, as well as functional updates and support for new
steppings.

Release notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260811
Sponsored by:	The FreeBSD Foundation
1fd6a002fb
Joseph Mingrone (jrm) · 20260512_2
Revert "sysutils/cpu-microcode-intel: Handle extended signature tables"

This reverts a change to the way Intel CPU microcode files were split.
In d4b93e8846, an explicitly named file was written for each
signature+platform combination in an image's extended signature table.
Writing these new files offered discoverability advantages, but it was
unnecessary since cpucontrol(8) already checks the embedded extended
signature table.  Moreover, adding these extra files increased the size
of the split files by about 50% when the default SPLIT knob was enabled.

This reverts commit d4b93e88468975e64d6321cfc463f5fc19f46d35.

PR:		295351
Sponsored by:	The FreeBSD Foundation
ead6f14767
Joseph Mingrone (jrm) · 20260512_1
sysutils/cpu-microcode-intel: Handle extended signature tables

Intel microcode files can contain an extended signature table after the
main payload, listing additional processor signatures and platform flag
combinations that are covered by the same microcode blob.

ucode-split was only reading the primary header signature when naming
output files and ignored the extended table entirely.  As a result,
processors whose signature appeared only in an extended table entry had
no matching split file in ${DATADIR} and therefore no microcode via
cpucontrol(8).

This affected a number of CPU families in the current release, including
Raptor Lake (06-bf-02/05/06/07, Core Gen13/Gen14), Sapphire Rapids
steppings E0-E3 (06-8f-04 through 06-8f-07), Arrow Lake-H (06-c5-02),
Panther Lake (06-cc-02/03), and others.

Extend ucode-split to read the extended signature table and write an
additional output file for each entry.

PR:		295351
Reported by:	fastboot <255.255.255.255@web.de>
Reviewed by:	markj, sbruno
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D57046
d4b93e8846
Joseph Mingrone (jrm) · 20260512
sysutils/cpu-microcode-intel: Update to 2026-05-12 release

This update includes security fixes for INTEL-SA-01420 affecting some
Arrow Lake and Panther Lake CPUs, as well as functional improvements for
various Intel Core Ultra and Xeon processors.

Release notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260512
Sponsored by:	The FreeBSD Foundation
64880edb1a
Joseph Mingrone (jrm) · 20260227
sysutils/cpu-microcode-intel: Update to 2026-02-27 release

This update is for functional issues with Xeon 6700P-B/6500P-B Series
SoC with P-Cores.

Release notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260227
Sponsored by:	The FreeBSD Foundation
0a59156682
Joseph Mingrone (jrm) · 20260210
sysutils/cpu-microcode-intel: Update to 20260210 release

This update addresses functional issues and security vulnerabilities for
INTEL-SA-01083 and INTEL-SA-01396.  Refer to the release notes for
details.

Release notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260210
Sponsored by:	The FreeBSD Foundation
0cc92863dd
Alexander Ziaee (ziaee) · 20251111_1
sysutils/cpu-microcode-intel: Dont depend on cpu-microcode-rc

All Intel systems running 15.0 or 14.3 support loading at boot time
without cpu-microcode-rc, therefore, do not depend on it by default.
Update the package message with the current up-to-date instructions.

Approved by:		jrm (maintainer)
Differential Revision:	https://reviews.freebsd.org/D54515
5b4090e27d
Joseph Mingrone (jrm) · 20251111
sysutils/cpu-microcode-intel: Update to 2025-11-11 release

This update provides functional improvements for a range of Intel CPUs
and introduces support for the Xeon 6700P-B/6500P-B Series SoCs with
P-cores.  See the upstream release notes for details.

Release notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20251111
Sponsored by:	The FreeBSD Foundation
d7fc2d4df6
Joseph Mingrone (jrm) · 20250812
sysutils/cpu-microcode-intel: Update to 2025-08-12 release

This update mitigates new security vulnerabilities affecting some Intel
CPUs.  See the release notes for details.

Release notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250812
Sponsored by:   The FreeBSD Foundation
96097b885c
Joseph Mingrone (jrm) · 20250512
sysutils/cpu-microcode-intel: Update to 2025-05-12 release

This update addresses functional issues and mitigates vulnerabilities affecting
certain Intel CPUs.  Refer to the release notes for details.

Release notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250512
Sponsored by:	The FreeBSD Foundation
1a17e85438
Joseph Mingrone (jrm) · 20250211
sysutils/cpu-microcode-intel: Update to 2025-02-11 release

This update mitigates vulnerabilities with some Intel CPUs.

Release notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250211
Security:	d598266d-7772-4a31-9594-83b76b1fb837
Sponsored by:	The FreeBSD Foundation
0838edbee4
Joseph Mingrone (jrm) · 20241112
sysutils/cpu-microcode-intel: Update to 2024-11-12 release

This update mitigates vulnerabilities with some Intel CPUs.

Release notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20241112
Security:	33236f80-a11d-11ef-a964-1c697a616631
Sponsored by:	The FreeBSD Foundation
ad87a5f000
Joseph Mingrone (jrm) · 20241029
sysutils/cpu-microcode-intel: Update to 2024-10-29 release

Release Notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20241029
Sponsored by:	The FreeBSD Foundation
6b9edb8d5e
Joseph Mingrone (jrm) · 20240910
sysutils/cpu-microcode-intel: Update to 2024-09-10 release

Release Notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240910
Security:	d5026193-6fa2-11ef-99bc-1c697a616631
Sponsored by:	The FreeBSD Foundation
c7f631b216
Joseph Mingrone (jrm) · 20240813
sysutils/cpu-microcode-intel: Update to 2024-08-13 release

Release notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240813
Security:	9d8e9952-5a42-11ef-a219-1c697a616631
Sponsored by:	The FreeBSD Foundation
21d7c76784
Joseph Mingrone (jrm) · 20240531
sysutils/cpu-microcode-intel: Update to 2024-05-31 release

Release Notes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240531
Sponsored by:	The FreeBSD Foundation
76423a6f3b
Joseph Mingrone (jrm) · 20240514
sysutils/cpu-microcode-intel: Update to 20240514 release

Changes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514
Sponsored by:	The FreeBSD Foundation
68e77c43dc
Joseph Mingrone (jrm) · 20240312
sysutils/cpu-microcode-intel: Update to 20240312

These Intel microcode updates address vulnerabilities reported by Intel.
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240312dis

Sponsored by:	The FreeBSD Foundation
62b70645fe
Joseph Mingrone (jrm) · 20231114
sysutils/cpu-microcode-intel: Update to 20231114 release

Changes:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20231114
Tested by:	dch
Sponsored by:	The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D42598
4248b3fcca
Joseph Mingrone (jrm) · 20230808_2
cpu microcode ports: Take maintainership

While here, pet portclippy/portfmt.

Approved by:	seanc (past maintainer)
Sponsored by:	The FreeBSD Foundation
82c1d7a1b7
Marius Strobl (marius) · 20230808_1
cpu-microcode-intel: Add knobs for RC RUN_DEPENDS and split files

Split UCODE files as well as dependency on sysutils/cpu-microcode-rc
are only required for use with cpucontrol(8) and update method two
respectively. The first method needs neither so we can spare a few
MiB and a superfluous port.
Given that the automatic update method one is superior, the RC knob
should be deprecated and removed eventually. At that point, split
UCODE files still will be useful for developers and if users want
to update the microcode without a reboot (but otherwise rely on the
loader for automatic updates, i. e. method one).

Reviewed by:	jrm (w/ style suggestions)
Approved by:	jrm (upcoming maintainer)
Differential Revision:	https://reviews.freebsd.org/D41904
d12bc36e76
Joseph Mingrone (jrm) · 20230808
sysutils/cpu-microcode-*: Reorganize CPU microcode ports

Prior to this update, sysutils/devcpu-data, which only contained an RC
script, had run dependencies on the AMD and Intel microcode ports.  This
made it cumbersome to have just the AMD or just the Intel microcode
ports installed.  With this change, the microcode ports now depend on
the RC script.

Other changes:

- Use more intuitive port names: cpu-microcode, cpu-microcode-amd,
  cpu-microcode-intel, and cpu-microcode-rc.
- Add the metaport, cpu-microcode, which pulls in all related ports.
- Pet portclippy/portfmt

Reviewed by:	lwhsu, markj
Approved by:	sbruno (maintainer)
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D41406
bc7829212d