high7.2
CVE-2024-56161
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode …
Impact
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3019.html
- http://www.openwall.com/lists/oss-security/2025/02/04/1
- http://www.openwall.com/lists/oss-security/2025/03/06/2
- https://lists.debian.org/debian-lts-announce/2025/03/msg00024.html
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7033.html