New AMD Zen CPU & Radeon GPU Microcode Land In Linux-Firmware.Git

[phoronix]

Phoronix: New AMD Zen CPU & Radeon GPU Microcode Land In Linux-Firmware.Git

Both new AMD Zen CPU and Radeon GPU microcode/firmware have been published today to the linux-firmware.git tree...

https://www.phoronix.com/news/AMD-Zen-Radeon-Linux-FW

[debrouxl]

Looks like this microcode update fixes the vulnerability reported by taviso at https://seclists.org/oss-sec/2023/q3/59 and elsewhere.

[avis]

The microcode update fixes a critical security vulnerability in the Zen 2 uArch:

https://lock.cmpxchg8b.com/zenbleed.html

https://www.tomshardware.com/news/zenbleed-bug-allows-data-theft-from-amds-zen-2-processors-patches-released

[jeisom]

It would be nice if they at least listed the CVEs that these updates addressed.

[r1348]

Looks like this 17h microcode doesn't apply to my 3700X.

I get this on kernel 6.4.10 with linux-firmware 20230804:

[r1348@fedora ~]$ dmesg | grep  microcode
[    0.115945] Zenbleed: please update your microcode for the most optimal fix
[    0.768614] microcode: CPU1: patch_level=0x08701030
[    0.768614] microcode: CPU0: patch_level=0x08701030
[    0.768617] microcode: CPU5: patch_level=0x08701030
[    0.768617] microcode: CPU4: patch_level=0x08701030
[    0.768618] microcode: CPU7: patch_level=0x08701030
[    0.768620] microcode: CPU8: patch_level=0x08701030
[    0.768630] microcode: CPU6: patch_level=0x08701030
[    0.768660] microcode: CPU3: patch_level=0x08701030
[    0.768681] microcode: CPU9: patch_level=0x08701030
[    0.768691] microcode: CPU11: patch_level=0x08701030
[    0.768701] microcode: CPU10: patch_level=0x08701030
[    0.768710] microcode: CPU12: patch_level=0x08701030
[    0.768724] microcode: CPU13: patch_level=0x08701030
[    0.768733] microcode: CPU14: patch_level=0x08701030
[    0.768739] microcode: CPU2: patch_level=0x08701030
[    0.768744] microcode: CPU15: patch_level=0x08701030
[    0.768756] microcode: Microcode Update Driver: v2.2.
​