Skip to content
OpenAdvisories
High USN-8475-1 3 CVEs

amd64-microcode vulnerabilities

Published Jun 25, 2026 · Updated Oct 17, 2026

Summary

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos,
and Flavien Solt discovered that some AMD processors may allow an attacker
to infer data from previous stores, potentially resulting in the leakage of
privileged information. A local attacker could possibly use this to expose
sensitive information. (CVE-2024-36350, CVE-2024-36357)

It was discovered that some AMD Zen 5 processors supporting RDSEED
instruction did not properly handle entropy, potentially resulting in the
consumption of insufficiently random values. A local attacker could
possibly use this issue to influence the values returned by the RDSEED
instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 24.04 LTS 24.04:LTS amd64-microcode 3.20251202.1ubuntu0.24.04.1
Ubuntu · 25.10 amd64-microcode 3.20251202.1ubuntu0.25.10.1

Vulnerabilities 3

References

  • report
    https://ubuntu.com/security/CVE-2024-36350
  • report
    https://ubuntu.com/security/CVE-2024-36357
  • report
    https://ubuntu.com/security/CVE-2025-62626