Skip to content
OpenAdvisories
Medium USN-7848-1 2 CVEs

amd64-microcode vulnerabilities

Published Oct 29, 2025 · Updated Feb 4, 2026

Summary

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos,
and Flavien Solt discovered that some AMD processors may allow an attacker
to infer data from previous stores. A local attacker could possibly use
this issue to expose sensitive information. This update provides the
updated microcode mitigations required for the corresponding Linux kernel
update.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 25.04 amd64-microcode 3.20250708.0ubuntu0.25.04.2

Vulnerabilities 2

References

  • report
    https://ubuntu.com/security/CVE-2024-36350
  • report
    https://ubuntu.com/security/CVE-2024-36357