Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Fedora 36: 2022-688cbbf106 Critical: Microcode Update Security Threats

fedora
Calendar Grey May 11, 2022
Scroller Fedora
Boost your machine's processing capabilities through vital firmware enhancements on Fedora, tackling various vulnerabilities effectively.
- Update to upstream 2.1-36

Summary

The microcode_ctl utility is a companion to the microcode driver written

by Tigran Aivazian .

The microcode update is volatile and needs to be uploaded on each system

boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts

back to the old microcode.

- Update to upstream 2.1-36. 20220510 - Addition of 06-97-02/0x03 (ADL-HX C0)

microcode at revision 0x1f; - Addition of 06-97-05/0x03 (ADL-S 6+0 K0)

microcode (in intel-ucode/06-97-02) at revision 0x1f; - Addition of

06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02) at revision 0x1f;

- Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02) at

revision 0x1f; - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in

intel-ucode/06-97-05) at revision 0x1f; - Addition of 06-97-05/0x03 (ADL-S 6+0

K0) microcode at revision 0x1f; - Addition of 06-bf-02/0x03 (ADL C0) microcode

(in intel-ucode/06-97-05) at revision 0x1f; - Addition of 06-bf-05/0x03

(ADL C0) microcode (in intel-ucode/06-97-05) at revision 0x1f; - Addition

of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at revision 0x41c; -Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in intel-ucode/06-9a-03)

at revision 0x41c; - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0)

microcode (in intel-ucode/06-9a-04) at revision 0x41c; - Addition of

06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c; - Addition of

06-97-02/0x03 (ADL-HX C0) microcode (in intel-ucode/06-bf-02) at revision

0x1f; - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-02) at revision 0x1f; - Addition of 06-bf-02/0x03 (ADL C0)

microcode at revision 0x1f; - Addition of 06-bf-05/0x03 (ADL C0) microcode (in

intel-ucode/06-bf-02) at revision 0x1f; - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in intel-ucode/06-bf-05) at revision 0x1f; - Addition of

06-97-05/0x03 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-05) at revision

0x1f; - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)

at revision 0x1f; - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision

0x1f; - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up

to 0x90d; - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode from

revision 0xec up to 0xf0; - Update of 06-55-03/0x97 (SKX-SP B1) microcode

from revision 0x100015c up to 0x100015d; - Update of 06-55-04/0xb7

(SKX-D/SP/W/X H0/M0/M1/U0) microcode from revision 0x2006c0a up to

0x2006d05; - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision

0x400320a up to 0x4003302; - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1)

microcode from revision 0x500320a up to 0x5003302; - Update of

06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402 up to 0x7002501;

- Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up to 0x48;

- Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode from revision

0xec up to 0xf0; - Update of 06-5f-01/0x01 (DNV B0) microcode from revision

0x36 up to 0x38; - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from

revision 0xd000331 up to 0xd000363; - Update of 06-7a-01/0x01 (GLK B0)

microcode from revision 0x38 up to 0x3a; - Update of 06-7a-08/0x01 (GLK-R

R0) microcode from revision 0x1c up to 0x1e; - Update of 06-7e-05/0x80

(ICL-U/Y D1) microcode from revision 0xa8 up to 0xb0; - Update of

06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up to 0x31; -Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision 0x9a up to

0xa4; - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up

to 0x26; - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up

to 0x3e; - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xec

up to 0xf0; - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from

revision 0xec up to 0xf0; - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R

Y0) microcode from revision 0xec up to 0xf0; - Update of 06-8e-0b/0xd0

(WHL-U W0) microcode from revision 0xec up to 0xf0; - Update of

06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode from revision

0xec up to 0xf0; - Update of 06-96-01/0x01 (EHL B1) microcode from revision

0x15 up to 0x16; - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from

revision 0x2400001f up to 0x24000023; - Update of 06-9e-09/0x2a

(KBL-G/H/S/X/Xeon E3 B0) microcode from revision 0xec up to 0xf0; - Update

of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xec up to

0xf0; - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xec

up to 0xf0; - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from

revision 0xec up to 0xf0; - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0)

microcode from revision 0xec up to 0xf0; - Update of 06-a5-02/0x20 (CML-H

R1) microcode from revision 0xec up to 0xf0; - Update of 06-a5-03/0x22

(CML-S 6+2 G1) microcode from revision 0xec up to 0xf0; - Update of

06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee up to 0xf0; -Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea up to

0xf0; - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision

0xec up to 0xf0; - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision

0x50 up to 0x53. - Addresses CVE-2022-0005, CVE-2022-21131, CVE-2022-21136,

CVE-2022-21151 ---- - Update to upstream 2.1-35. 20220419 - Update of

06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up to 0x28.

* Tue May 10 2022 Eugene Syromiatnikov 2:2.1-51

- Update to upstream 2.1-36. 20220510

- Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;

- Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in

intel-ucode/06-97-02) at revision 0x1f;

- Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)

at revision 0x1f;

- Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)

at revision 0x1f;

- Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in

intel-ucode/06-97-05) at revision 0x1f;

- Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;

- Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)

at revision 0x1f;

- Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)

at revision 0x1f;

- Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at

revision 0x41c;

- Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in

intel-ucode/06-9a-03) at revision 0x41c;

- Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in

intel-ucode/06-9a-04) at revision 0x41c;

- Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;

- Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in

intel-ucode/06-bf-02) at revision 0x1f;

- Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in

intel-ucode/06-bf-02) at revision 0x1f;

- Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;

- Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)

at revision 0x1f;

- Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in

intel-ucode/06-bf-05) at revision 0x1f;

- Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in

intel-ucode/06-bf-05) at revision 0x1f;

- Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)

at revision 0x1f;

- Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;

- Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up

to 0x90d;

- Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode from revision

0xec up to 0xf0;

- Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c

up to 0x100015d;

- Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode from

revision 0x2006c0a up to 0x2006d05;

- Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a

up to 0x4003302;

- Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision

0x500320a up to 0x5003302;

- Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402

up to 0x7002501;

- Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up

to 0x48;

- Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode from

revision 0xec up to 0xf0;

- Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up

to 0x38;

- Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331

up to 0xd000363;

- Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up

to 0x3a;

- Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up

to 0x1e;

- Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8

up to 0xb0;

- Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up

to 0x31;

- Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision

0x9a up to 0xa4;

- Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up

to 0x26;

- Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up

to 0x3e;

- Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xec

up to 0xf0;

- Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision

0xec up to 0xf0;

- Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from

revision 0xec up to 0xf0;

- Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xec up

to 0xf0;

- Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)

microcode from revision 0xec up to 0xf0;

- Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up

to 0x16;

- Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f

up to 0x24000023;

- Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from

revision 0xec up to 0xf0;

- Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision

0xec up to 0xf0;

- Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xec

up to 0xf0;

- Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision

0xec up to 0xf0;

- Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision

0xec up to 0xf0;

- Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up

to 0xf0;

- Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec

up to 0xf0;

- Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee

up to 0xf0;

- Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea

up to 0xf0;

- Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision

0xec up to 0xf0;

- Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up

to 0x53.

- Addresses CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151

* Tue May 10 2022 Eugene Syromiatnikov 2:2.1-50

- Update to upstream 2.1-35. 20220419

- Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up

to 0x28.

su -c 'dnf upgrade --advisory FEDORA-2022-688cbbf106' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 36
Version: 2.1
Release: 51.fc36
Summary: Tool to transform and deploy CPU microcode update for x86

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.