USN-8068-1: Intel Microcode vulnerability

USN-8068-1: Intel Microcode vulnerability

Publication date: 3 March 2026
Overview: The system could be made to run programs as an administrator.

Packages

• intel-microcode - Processor microcode for Intel CPUs

Details
Sergiu Ghetie discovered that some Intel® processors did not properly
handle values in the microcode flow. A local authenticated user could
potentially use this issue to escalate their privileges.

Update instructions
The problem can be corrected by updating your system to the following package versions:

• 25.10 questing intel-microcode – 3.20260210.0ubuntu0.25.10.1
• 24.04 LTS noble intel-microcode – 3.20260210.0ubuntu0.24.04.1
• 22.04 LTS jammy intel-microcode – 3.20260210.0ubuntu0.22.04.1
• 20.04 LTS focal intel-microcode – 3.20260210.0ubuntu0.20.04.1+esm1
• 18.04 LTS bionic intel-microcode – 3.20260210.0ubuntu0.18.04.1+esm1
• 16.04 LTS xenial intel-microcode – 3.20260210.0ubuntu0.16.04.1+esm1