Differential D46269
Update cpu-microcode-amd to contain ucode with sinkclose mitigation Authored by nyan_myuji.xyz on Aug 10 2024, 10:15 PM. Tags None Referenced Files
Subscribers None
Details Commit to the Linux Firmware repository: This commit contains microcode update to mitigate the sinkclose vulnerability
Diff Detail
Event TimelineComment Actions Thanks! I don't see anything in the commit log of https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=091bd5adf19c7ab01214c64689952acb483 that the update addresses the vulnerabilities. Do you have a reference for that point? Comment Actions No worries! It is indeed quite hidden. Here is to AMD's reference https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7014.html on the microcode revisions containing mitigation to the vulnerabilities, which are the same revisions documented in the README file of the original commit. --- a/amd-ucode/README +++ b/amd-ucode/README @@ -31,19 +31,19 @@ Microcode patches in microcode_amd_fam16h.bin: Family=0x16 Model=0x00 Stepping=0x01: Patch=0x0700010f Length=3458 bytes Microcode patches in microcode_amd_fam17h.bin: + Family=0x17 Model=0x01 Stepping=0x02: Patch=0x0800126f Length=3200 bytes + Family=0x17 Model=0x31 Stepping=0x00: Patch=0x0830107c Length=3200 bytes Family=0x17 Model=0x08 Stepping=0x02: Patch=0x0800820d Length=3200 bytes - Family=0x17 Model=0x31 Stepping=0x00: Patch=0x0830107b Length=3200 bytes Family=0x17 Model=0xa0 Stepping=0x00: Patch=0x08a00008 Length=3200 bytes - Family=0x17 Model=0x01 Stepping=0x02: Patch=0x0800126e Length=3200 bytes Microcode patches in microcode_amd_fam19h.bin: - Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a101244 Length=5568 bytes - Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001236 Length=5568 bytes - Family=0x19 Model=0x01 Stepping=0x00: Patch=0x0a001079 Length=5568 bytes - Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d3 Length=5568 bytes - Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00213 Length=5568 bytes + Family=0x19 Model=0x01 Stepping=0x00: Patch=0x0a00107a Length=5568 bytes + Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a101248 Length=5568 bytes + Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00215 Length=5568 bytes + Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001238 Length=5568 bytes + Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a101148 Length=5568 bytes + Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d5 Length=5568 bytes Family=0x19 Model=0xa0 Stepping=0x01: Patch=0x0aa00116 Length=5568 bytes - Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a101144 Length=5568 bytes Comment Actions Good eye. It's even less evident because on the AMD disclosure site the date beside, e.g., 0x0800126f is 2024-05-03 and not 2024-08-10. Maybe the earlier date was some kind of internal release date. In any case, I'll commit this along with a vuxml entry. Thanks again. |