p PatchFirst

CVE-2024-56161

CVE-2024-56161

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.

CVSS 7.2 · High · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • amd epyc™ 7001 series

    Versions
    • NaplesPI 1.0.0.P: Not affected

    No fix published

  • amd epyc™ 7002 series

    Versions
    • RomePI 1.0.0.L: Not affected

    No fix published

  • amd epyc™ 7003 series

    Versions
    • MilanPI 1.0.0.F: Not affected

    No fix published

  • amd epyc™ 9004 series

    Versions
    • Genoa 1.0.0.E: Not affected

    No fix published

  • amd64-microcode Debian:12

    Versions
    • 0.20120117-1
    • 1.20120117-1
    • 1.20120117-2
    • 1.20120117-2~bpo60+1
    • 1.20120910-1
    • 1.20120910-1~bpo60+1
    • 1.20120910-2
    • 1.20120910-2~bpo60+1
    • 1.20120910-3
    • 1.20141028.1
    • 1.20160316.1
    • 2.20120910-1
    • 2.20120910-1~bpo70+1
    • 2.20131007.1
    • 2.20131007.1+really20130710.1
    • 2.20141028.1
    • 2.20141028.1~bpo70+1
    • 2.20160316.1
    • 2.20160316.1~bpo70+1
    • 2.20160316.1~deb8u1
    • 3.20160316.1
    • 3.20160316.2
    • 3.20160316.3
    • 3.20171205.1
    • 3.20171205.2
    • 3.20180515.1
    • 3.20180524.1
    • 3.20180524.1~bpo9+1
    • 3.20181128.1
    • 3.20181128.1~bpo9+1
    • 3.20181128.1~deb8u1
    • 3.20181128.1~deb9u1
    • 3.20181128.1~deb9u2
    • 3.20191021.1
    • 3.20191218.1
    • 3.20220411.1
    • 3.20220411.2
    • 3.20230414.1
    • 3.20230719.1
    • 3.20230719.1~deb10u1
    • 3.20230719.1~deb11u1
    • 3.20230719.1~deb12u1
    • 3.20230808.1
    • 3.20230808.1.1
    • 3.20230808.1.1~deb11u1
    • 3.20230808.1.1~deb12u1
    • 3.20230823.1
    • 3.20231019.1
    • 3.20240116.2
    • 3.20240116.2+nmu1
    • 3.20240710.1
    • 3.20240710.2
    • 3.20240710.2~deb11u1
    • 3.20240710.2~deb12u1
    • 3.20240820.1
    • 3.20240820.1~deb11u1
    • 3.20240820.1~deb12u1
    • 3.20250311.1~deb11u1
    Affected ranges
    • ECOSYSTEM: < 3.20250311.1~deb12u1

    Update to 3.20250311.1~deb12u1

  • amd64-microcode Debian:13

    Versions
    • 0.20120117-1
    • 1.20120117-1
    • 1.20120117-2
    • 1.20120117-2~bpo60+1
    • 1.20120910-1
    • 1.20120910-1~bpo60+1
    • 1.20120910-2
    • 1.20120910-2~bpo60+1
    • 1.20120910-3
    • 1.20141028.1
    • 1.20160316.1
    • 2.20120910-1
    • 2.20120910-1~bpo70+1
    • 2.20131007.1
    • 2.20131007.1+really20130710.1
    • 2.20141028.1
    • 2.20141028.1~bpo70+1
    • 2.20160316.1
    • 2.20160316.1~bpo70+1
    • 2.20160316.1~deb8u1
    • 3.20160316.1
    • 3.20160316.2
    • 3.20160316.3
    • 3.20171205.1
    • 3.20171205.2
    • 3.20180515.1
    • 3.20180524.1
    • 3.20180524.1~bpo9+1
    • 3.20181128.1
    • 3.20181128.1~bpo9+1
    • 3.20181128.1~deb8u1
    • 3.20181128.1~deb9u1
    • 3.20181128.1~deb9u2
    • 3.20191021.1
    • 3.20191218.1
    • 3.20220411.1
    • 3.20220411.2
    • 3.20230414.1
    • 3.20230719.1
    • 3.20230719.1~deb10u1
    • 3.20230719.1~deb11u1
    • 3.20230719.1~deb12u1
    • 3.20230808.1
    • 3.20230808.1.1
    • 3.20230808.1.1~deb11u1
    • 3.20230808.1.1~deb12u1
    • 3.20230823.1
    • 3.20231019.1
    • 3.20240116.2
    • 3.20240116.2+nmu1
    • 3.20240710.1
    • 3.20240710.2
    • 3.20240710.2~deb11u1
    • 3.20240710.2~deb12u1
    • 3.20240820.1
    • 3.20240820.1~deb11u1
    • 3.20240820.1~deb12u1
    • 3.20250311.1~deb11u1
    • 3.20250311.1~deb12u1
    Affected ranges
    • ECOSYSTEM: < 3.20250311.1

    Update to 3.20250311.1

  • amd64-microcode Debian:14

    Versions
    • 0.20120117-1
    • 1.20120117-1
    • 1.20120117-2
    • 1.20120117-2~bpo60+1
    • 1.20120910-1
    • 1.20120910-1~bpo60+1
    • 1.20120910-2
    • 1.20120910-2~bpo60+1
    • 1.20120910-3
    • 1.20141028.1
    • 1.20160316.1
    • 2.20120910-1
    • 2.20120910-1~bpo70+1
    • 2.20131007.1
    • 2.20131007.1+really20130710.1
    • 2.20141028.1
    • 2.20141028.1~bpo70+1
    • 2.20160316.1
    • 2.20160316.1~bpo70+1
    • 2.20160316.1~deb8u1
    • 3.20160316.1
    • 3.20160316.2
    • 3.20160316.3
    • 3.20171205.1
    • 3.20171205.2
    • 3.20180515.1
    • 3.20180524.1
    • 3.20180524.1~bpo9+1
    • 3.20181128.1
    • 3.20181128.1~bpo9+1
    • 3.20181128.1~deb8u1
    • 3.20181128.1~deb9u1
    • 3.20181128.1~deb9u2
    • 3.20191021.1
    • 3.20191218.1
    • 3.20220411.1
    • 3.20220411.2
    • 3.20230414.1
    • 3.20230719.1
    • 3.20230719.1~deb10u1
    • 3.20230719.1~deb11u1
    • 3.20230719.1~deb12u1
    • 3.20230808.1
    • 3.20230808.1.1
    • 3.20230808.1.1~deb11u1
    • 3.20230808.1.1~deb12u1
    • 3.20230823.1
    • 3.20231019.1
    • 3.20240116.2
    • 3.20240116.2+nmu1
    • 3.20240710.1
    • 3.20240710.2
    • 3.20240710.2~deb11u1
    • 3.20240710.2~deb12u1
    • 3.20240820.1
    • 3.20240820.1~deb11u1
    • 3.20240820.1~deb12u1
    • 3.20250311.1~deb11u1
    • 3.20250311.1~deb12u1
    Affected ranges
    • ECOSYSTEM: < 3.20250311.1

    Update to 3.20250311.1

  • amd64-microcode Ubuntu:24.04:LTS

    Versions
    • 3.20230808.1.1ubuntu1
    • 3.20231019.1ubuntu1
    • 3.20231019.1ubuntu2
    • 3.20231019.1ubuntu2.1
    Affected ranges
    • ECOSYSTEM: < 3.20250311.1ubuntu0.24.04.1

    Update to 3.20250311.1ubuntu0.24.04.1

Original sources

Check your server →