USN-6244-1: AMD Microcode vulnerability
Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is USN-6244-1?
USN-6244-1 is a security vulnerability in AMD microcode that could allow a local attacker to expose sensitive information.
How does the AMD Microcode vulnerability work?
The AMD Microcode vulnerability occurs when certain vector register instructions are not properly handled during speculative execution, allowing a local attacker to expose sensitive information.
Which systems are affected by the AMD Microcode vulnerability?
Systems running Ubuntu 23.04, 22.04, 20.04, 18.04, and 16.04 with specific versions of the amd64-microcode package are affected by the AMD Microcode vulnerability.
How can I fix the AMD Microcode vulnerability?
To fix the AMD Microcode vulnerability, update the amd64-microcode package to version 3.20220411.1ubuntu3.1 (for Ubuntu 23.04), 3.20191218.1ubuntu2.1 (for Ubuntu 22.04), 3.20191218.1ubuntu1.1 (for Ubuntu 20.04), 3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm1 (for Ubuntu 18.04), or 3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm1 (for Ubuntu 16.04).
Where can I find more information about the AMD Microcode vulnerability?
More information about the AMD Microcode vulnerability can be found at the following references: USN-6315-1, USN-6316-1, and CVE-2023-20593.