Critical Regression in Intel Microcode Package: USN-4385-2
Summary
USN-4385-2: intel-microcode regression. Affects intel-microcode versions < 3.20200609.0ubuntu0.14.04.1. Fixed in 3.20200609.0ubuntu0.14.04.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Intel Microcode package is essential for updating the microcode of Intel processors, ensuring optimal performance and security. It addresses various processor-specific issues and vulnerabilities. However, a recent update introduced a regression affecting certain Intel Skylake processors, leading to boot failures and system instability.
Vulnerability Detail
The vulnerability stems from an update in USN-4385-1, which inadvertently caused boot failures in specific Intel Skylake processors (06_4EH). Additionally, the update enabled late loading of microcode on Ubuntu 20.04 LTS, potentially leading to system instability. This situation exposes users to risks of system crashes and data loss, particularly for those relying on affected processors.
How To Fix
Minimum fixed version
3.20200609.0ubuntu0.14.04.1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade intel-microcodeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
For immediate recovery, users can add the 'dis_ucode_ldr' kernel command line option in the boot menu to disable microcode loading, which may help in booting the system successfully.
Conclusion
The Intel Microcode package has a critical vulnerability that affects specific Skylake processors, leading to boot failures and system instability. Users are advised to update to the patched versions available for their respective Ubuntu distributions or apply the provided workaround for immediate recovery.
See every vulnerability recorded for intel-microcode →
FAQ
The Intel Microcode package updates the microcode of Intel processors, addressing performance and security issues.
The boot failure was caused by a regression introduced in the USN-4385-1 update, which affected certain Skylake processors.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider using the workaround by adding 'dis_ucode_ldr' to the boot menu to prevent microcode loading.
Yes, users relying on affected processors may experience system crashes and potential data loss due to the instability introduced by the update.
Related vulnerabilities
Recent vulnerabilities recorded for intel-microcode.
