Alerts This Week
Warning Icon 1 1,394
Alerts This Week
Warning Icon 1 1,394

Ubuntu 24.10 and 24.04 LTS: AMD Microcode Security Advisory

ubuntu
Calendar Grey June 9, 2025
Dist Ubuntu Esm H88
Crucial patches for AMD Microcode on Ubuntu address multiple security flaws that might be leveraged by local users.
Several security issues were fixed in AMD Microcode.

Summary

Several security issues were fixed in AMD Microcode.

Software Description:

- amd64-microcode: Platform firmware and microcode for AMD CPUs and SoCs

Details:

It was discovered that AMD Microcode incorrectly handled memory addresses.

An attacker with local administrator privilege could possibly use this

issue to cause loss of integrity of a confidential guest running under AMD

SEV-SNP. (CVE-2023-20584, CVE-2023-31356)

Josh Eads, Kristoffer Janke, Eduardo Nava, Tavis Ormandy and Matteo Rizzo

discovered that AMD Microcode incorrectly verified signatures. An attacker

with local administrator privilege could possibly use this issue to cause

loss of confidentiality and integrity of a confidential guest running under

AMD SEV-SNP. (CVE-2024-56161)

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
  amd64-microcode                 3.20250311.1ubuntu0.24.10.1

Ubuntu 24.04 LTS
  amd64-microcode                 3.20250311.1ubuntu0.24.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7561-1

CVE-2023-20584, CVE-2023-31356, CVE-2024-56161

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7561-1

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here