Summary
Josh Eads, Kristoffer Janke, Eduardo Nava, Tavis Ormandy and Matteo Rizzo
discovered that AMD Microcode incorrectly verified signatures. An attacker
with local administrator privilege could possibly use this issue to cause
loss of confidentiality and integrity of a confidential guest running under
AMD SEV-SNP.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 25.04 | amd64-microcode | 3.20250311.1ubuntu0.25.04.1 |
Vulnerabilities 1
-
High 7.2
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator pr…
References
-
report
https://ubuntu.com/security/CVE-2024-56161