Critical Vulnerabilities in amd64-microcode: Memory Address Handling and Signature Verification Issues
Summary
USN-7561-1: amd64-microcode vulnerabilities. Affects amd64-microcode versions < 3.20250311.1ubuntu0.24.04.1. Fixed in 3.20250311.1ubuntu0.24.04.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The amd64-microcode package provides essential microcode updates for AMD processors, enhancing system stability and performance. It plays a crucial role in ensuring that the CPU operates correctly and securely. However, recent vulnerabilities have been identified that could compromise the integrity and confidentiality of systems utilizing AMD SEV-SNP technology.
Vulnerability Detail
The vulnerabilities stem from improper handling of memory addresses and inadequate signature verification within the AMD Microcode. These issues could allow an attacker with local administrator privileges to exploit the vulnerabilities, potentially leading to loss of integrity and confidentiality for confidential guests running under AMD SEV-SNP. The vulnerabilities are identified as CVE-2023-20584, CVE-2023-31356, and CVE-2024-56161.
How To Fix
Minimum fixed version
3.20250311.1ubuntu0.24.04.1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade amd64-microcodeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for these vulnerabilities. The best course of action is to apply the available patch as soon as possible.
Conclusion
The amd64-microcode package has critical vulnerabilities that could jeopardize the integrity and confidentiality of systems using AMD SEV-SNP. It is imperative to update to the latest patched version to safeguard against these risks.
See every vulnerability recorded for amd64-microcode →
FAQ
amd64-microcode is a package that provides microcode updates for AMD processors, ensuring they function correctly and securely.
The vulnerabilities could allow an attacker with local administrator privileges to compromise the integrity and confidentiality of systems running AMD SEV-SNP.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without requiring any signup.
Yes, a patch is available. You should update the amd64-microcode package to version 3.20250311.1ubuntu0.24.04.1 to mitigate the vulnerabilities.
While there are no specific workarounds, it is crucial to prioritize applying the patch as soon as possible to protect your system from potential exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for amd64-microcode.
