Ubuntu alert USN-8475-1 (amd64-microcode)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8475-1] AMD Microcode vulnerabilities
Date:
             
 
Thu, 25 Jun 2026 17:49:15 +0000
Message-ID:
             
 
<E1wcoCR-0001lq-Lr@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8475-1
June 25, 2026

amd64-microcode vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS

Summary:

Several security issues were fixed in AMD Microcode.

Software Description:
- amd64-microcode: Platform firmware and microcode for AMD CPUs and SoCs

Details:

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos,
and Flavien Solt discovered that some AMD processors may allow an attacker
to infer data from previous stores, potentially resulting in the leakage of
privileged information. A local attacker could possibly use this to expose
sensitive information. (CVE-2024-36350, CVE-2024-36357)

It was discovered that some AMD Zen 5 processors supporting RDSEED
instruction did not properly handle entropy, potentially resulting in the
consumption of insufficiently random values. A local attacker could
possibly use this issue to influence the values returned by the RDSEED
instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  amd64-microcode                 3.20251202.1ubuntu0.25.10.1

Ubuntu 24.04 LTS
  amd64-microcode                 3.20251202.1ubuntu0.24.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: For the most comprehensive protection, users should update
their system BIOS/UEFI to the latest version provided by their hardware
vendor. If the BIOS has not been updated, this microcode update will
apply the latest available mitigations that can be delivered via the
operating system. For more information, please see:
https://ubuntu.com/security/vulnerabilities/entrysign

References:
  https://ubuntu.com/security/notices/USN-8475-1
  CVE-2024-36350, CVE-2024-36357, CVE-2025-62626

Package Information:
  https://launchpad.net/ubuntu/+source/amd64-microcode/3.20...
  https://launchpad.net/ubuntu/+source/amd64-microcode/3.20...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=a8UF
-----END PGP SIGNATURE-----