{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "Intel Processor Breakpoint Control Flow",
    "tracking": {
      "current_release_date": "2026-07-25T02:29:56+00:00",
      "generator": {
        "date": "2026-07-25T02:29:56+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.1.0"
        }
      },
      "id": "CVE-2021-0127",
      "initial_release_date": "2022-02-08T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-07-25T02:29:56+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7.3",
            "product": {
              "name": "Red Hat Enterprise Linux 7.3",
              "product_id": "rhel-7.3.z.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7.4.z",
            "product": {
              "name": "Red Hat Enterprise Linux 7.4.z",
              "product_id": "rhel-7.4.z.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7.6.z",
            "product": {
              "name": "Red Hat Enterprise Linux 7.6.z",
              "product_id": "rhel-7.6.z.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7.7.z",
            "product": {
              "name": "Red Hat Enterprise Linux 7.7.z",
              "product_id": "rhel-7.7.z.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7.9.z",
            "product": {
              "name": "Red Hat Enterprise Linux 7.9.z",
              "product_id": "rhel-7.9.z.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.1.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.1.0.z",
              "product_id": "rhel-8.1.0.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.2.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.2.0.z",
              "product_id": "rhel-8.2.0.z.aus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_aus:8.2"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.4.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.4.0.z",
              "product_id": "rhel-8.4.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:8.4"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.5",
            "product": {
              "name": "Red Hat Enterprise Linux 8.5",
              "product_id": "rhel-8.5.0.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.6",
            "product": {
              "name": "Red Hat Enterprise Linux 8.6",
              "product_id": "rhel-8.6.0",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "microcode_ctl",
            "product": {
              "name": "microcode_ctl",
              "product_id": "microcode_ctl",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/microcode_ctl"
              }
            }
          },
          {
            "category": "product_version",
            "name": "microcode_ctl-debuginfo",
            "product": {
              "name": "microcode_ctl-debuginfo",
              "product_id": "microcode_ctl-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/microcode_ctl-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "microcode_ctl",
            "product": {
              "name": "microcode_ctl",
              "product_id": "microcode_ctl.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/microcode_ctl?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl as a component of Red Hat Enterprise Linux 7.3",
          "product_id": "rhel-7.3.z.els:microcode_ctl"
        },
        "product_reference": "microcode_ctl",
        "relates_to_product_reference": "rhel-7.3.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:microcode_ctl"
        },
        "product_reference": "microcode_ctl",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl as a component of Red Hat Enterprise Linux 7.4.z",
          "product_id": "rhel-7.4.z.els:microcode_ctl"
        },
        "product_reference": "microcode_ctl",
        "relates_to_product_reference": "rhel-7.4.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl as a component of Red Hat Enterprise Linux 7.6.z",
          "product_id": "rhel-7.6.z.els:microcode_ctl"
        },
        "product_reference": "microcode_ctl",
        "relates_to_product_reference": "rhel-7.6.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:microcode_ctl"
        },
        "product_reference": "microcode_ctl",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl as a component of Red Hat Enterprise Linux 7.9.z",
          "product_id": "rhel-7.9.z.els:microcode_ctl"
        },
        "product_reference": "microcode_ctl",
        "relates_to_product_reference": "rhel-7.9.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl as a component of Red Hat Enterprise Linux 7.7.z",
          "product_id": "rhel-7.7.z.els:microcode_ctl"
        },
        "product_reference": "microcode_ctl",
        "relates_to_product_reference": "rhel-7.7.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-debuginfo as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:microcode_ctl-debuginfo"
        },
        "product_reference": "microcode_ctl-debuginfo",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl.src as a component of Red Hat Enterprise Linux 8.5",
          "product_id": "rhel-8.5.0.z:microcode_ctl.src"
        },
        "product_reference": "microcode_ctl.src",
        "relates_to_product_reference": "rhel-8.5.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl.src as a component of Red Hat Enterprise Linux 8.1.0.z",
          "product_id": "rhel-8.1.0.z:microcode_ctl.src"
        },
        "product_reference": "microcode_ctl.src",
        "relates_to_product_reference": "rhel-8.1.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl.src as a component of Red Hat Enterprise Linux 7.3",
          "product_id": "rhel-7.3.z.els:microcode_ctl.src"
        },
        "product_reference": "microcode_ctl.src",
        "relates_to_product_reference": "rhel-7.3.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl.src as a component of Red Hat Enterprise Linux 8.6",
          "product_id": "rhel-8.6.0:microcode_ctl.src"
        },
        "product_reference": "microcode_ctl.src",
        "relates_to_product_reference": "rhel-8.6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl.src as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:microcode_ctl.src"
        },
        "product_reference": "microcode_ctl.src",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl.src as a component of Red Hat Enterprise Linux 8.2.0.z",
          "product_id": "rhel-8.2.0.z.aus:microcode_ctl.src"
        },
        "product_reference": "microcode_ctl.src",
        "relates_to_product_reference": "rhel-8.2.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl.src as a component of Red Hat Enterprise Linux 7.4.z",
          "product_id": "rhel-7.4.z.els:microcode_ctl.src"
        },
        "product_reference": "microcode_ctl.src",
        "relates_to_product_reference": "rhel-7.4.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl.src as a component of Red Hat Enterprise Linux 7.6.z",
          "product_id": "rhel-7.6.z.els:microcode_ctl.src"
        },
        "product_reference": "microcode_ctl.src",
        "relates_to_product_reference": "rhel-7.6.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:microcode_ctl.src"
        },
        "product_reference": "microcode_ctl.src",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl.src as a component of Red Hat Enterprise Linux 7.9.z",
          "product_id": "rhel-7.9.z.els:microcode_ctl.src"
        },
        "product_reference": "microcode_ctl.src",
        "relates_to_product_reference": "rhel-7.9.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl.src as a component of Red Hat Enterprise Linux 7.7.z",
          "product_id": "rhel-7.7.z.els:microcode_ctl.src"
        },
        "product_reference": "microcode_ctl.src",
        "relates_to_product_reference": "rhel-7.7.z.els"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-0127",
      "discovery_date": "2022-02-02T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-6-els.els:microcode_ctl",
            "rhel-6-els.els:microcode_ctl-debuginfo",
            "rhel-6-els.els:microcode_ctl.src",
            "rhel-8.6.0:microcode_ctl.src"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "Red Hat has very limited to no visibility and control over binary blobs provided by third-party vendors. Red Hat relies heavily on the vendors to provide timely updates and information about included changes for this content. In most cases, it merely acts as a release vehicle between the third-party vendor and Red Hat customers with no possibility of influencing or even documenting the changes. Unless explicitly stated, the level of insight, oversight, and control Red Hat has does not meet the criteria required (in terms of Red Hat-owned development processes and QA documentation) for releasing this content as RHSA. For more information, please contact the binary content vendor.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "A flaw was found in microcode. Under complex microarchitectural conditions, an unexpected code breakpoint may cause a system hang. The hang was observed on a Skylake server processor, and subsequent analysis indicated additional potentially affected processors. This flaw allows a possible temporary denial of service (TDOS) to occur.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "rhel-7.3.z.els:microcode_ctl",
          "rhel-7.3.z.els:microcode_ctl.src",
          "rhel-7.4.z.els:microcode_ctl",
          "rhel-7.4.z.els:microcode_ctl.src",
          "rhel-7.6.z.els:microcode_ctl",
          "rhel-7.6.z.els:microcode_ctl.src",
          "rhel-7.7.z.els:microcode_ctl",
          "rhel-7.7.z.els:microcode_ctl.src",
          "rhel-7.9.z.els:microcode_ctl",
          "rhel-7.9.z.els:microcode_ctl.src",
          "rhel-8.1.0.z:microcode_ctl.src",
          "rhel-8.2.0.z.aus:microcode_ctl.src",
          "rhel-8.4.0.z.eus:microcode_ctl",
          "rhel-8.4.0.z.eus:microcode_ctl.src",
          "rhel-8.5.0.z:microcode_ctl.src"
        ],
        "known_not_affected": [
          "rhel-6-els.els:microcode_ctl",
          "rhel-6-els.els:microcode_ctl-debuginfo",
          "rhel-6-els.els:microcode_ctl.src",
          "rhel-8.6.0:microcode_ctl.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-0127"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-0127"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0127"
        }
      ],
      "remediations": [
        {
          "category": "none_available",
          "details": "Affected",
          "product_ids": [
            "rhel-7.3.z.els:microcode_ctl",
            "rhel-7.3.z.els:microcode_ctl.src",
            "rhel-7.4.z.els:microcode_ctl",
            "rhel-7.4.z.els:microcode_ctl.src",
            "rhel-7.6.z.els:microcode_ctl",
            "rhel-7.6.z.els:microcode_ctl.src",
            "rhel-7.7.z.els:microcode_ctl",
            "rhel-7.7.z.els:microcode_ctl.src",
            "rhel-7.9.z.els:microcode_ctl",
            "rhel-7.9.z.els:microcode_ctl.src",
            "rhel-8.1.0.z:microcode_ctl.src",
            "rhel-8.2.0.z.aus:microcode_ctl.src",
            "rhel-8.4.0.z.eus:microcode_ctl",
            "rhel-8.4.0.z.eus:microcode_ctl.src",
            "rhel-8.5.0.z:microcode_ctl.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM"
          },
          "products": [
            "rhel-6-els.els:microcode_ctl",
            "rhel-6-els.els:microcode_ctl-debuginfo",
            "rhel-6-els.els:microcode_ctl.src",
            "rhel-7.3.z.els:microcode_ctl",
            "rhel-7.3.z.els:microcode_ctl.src",
            "rhel-7.4.z.els:microcode_ctl",
            "rhel-7.4.z.els:microcode_ctl.src",
            "rhel-7.6.z.els:microcode_ctl",
            "rhel-7.6.z.els:microcode_ctl.src",
            "rhel-7.7.z.els:microcode_ctl",
            "rhel-7.7.z.els:microcode_ctl.src",
            "rhel-7.9.z.els:microcode_ctl",
            "rhel-7.9.z.els:microcode_ctl.src",
            "rhel-8.1.0.z:microcode_ctl.src",
            "rhel-8.2.0.z.aus:microcode_ctl.src",
            "rhel-8.4.0.z.eus:microcode_ctl",
            "rhel-8.4.0.z.eus:microcode_ctl.src",
            "rhel-8.5.0.z:microcode_ctl.src",
            "rhel-8.6.0:microcode_ctl.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "rhel-6-els.els:microcode_ctl",
            "rhel-6-els.els:microcode_ctl-debuginfo",
            "rhel-6-els.els:microcode_ctl.src",
            "rhel-7.3.z.els:microcode_ctl",
            "rhel-7.3.z.els:microcode_ctl.src",
            "rhel-7.4.z.els:microcode_ctl",
            "rhel-7.4.z.els:microcode_ctl.src",
            "rhel-7.6.z.els:microcode_ctl",
            "rhel-7.6.z.els:microcode_ctl.src",
            "rhel-7.7.z.els:microcode_ctl",
            "rhel-7.7.z.els:microcode_ctl.src",
            "rhel-7.9.z.els:microcode_ctl",
            "rhel-7.9.z.els:microcode_ctl.src",
            "rhel-8.1.0.z:microcode_ctl.src",
            "rhel-8.2.0.z.aus:microcode_ctl.src",
            "rhel-8.4.0.z.eus:microcode_ctl",
            "rhel-8.4.0.z.eus:microcode_ctl.src",
            "rhel-8.5.0.z:microcode_ctl.src",
            "rhel-8.6.0:microcode_ctl.src"
          ]
        }
      ],
      "title": "Intel Processor Breakpoint Control Flow"
    }
  ]
}