CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

sysutils/cpu-microcode-amd20251202

AMD CPU microcode updates

Maintainer
jrm@FreeBSD.org
Packages
cpu-microcode-amd 20251202
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
UNKNOWN
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range this version has left.

Commits (11)

Joseph Mingrone (jrm) · 20251202
sysutils/cpu-microcode-amd: Update to 2025-12-02 snapshot

Update AMD CPU microcode for processor families 19h and 1ah.

From upstream's README:
NOTE: In order to not fully abandon machines affected by AMD-SB-7033 [1]
that have not received the BIOS update, the family 19h microcode
container now includes a second patch for these machines that brings the
microcode to the highest possible level without the microcode signing
fix.  While a BIOS update is highly recommended to receive the latest
security updates issued after the microcode signing vulnerability, this
will allow non-updated systems to at least receive some microcode
updates beyond the version provided by BIOS.

[1] https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7033.html

Upstream Linux firmware commits since last update:
https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/amd-ucode?id=2b318c8e4159234ddbcc1cadc90cf32d17d9ee82
https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/amd-ucode?id=6167e5566900cf236f7a69704e8f4c441bc7212a
https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/amd-ucode?id=e637542fa8b9e0a88b0b2885072eea7df3737969
https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/amd-ucode?id=ad91544767665e911386e62ecebaa969e2cfb1c0
https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/amd-ucode?id=3a49a7356a8c83a33d0214edfc5d8fd835caa93a

Reviewed by:	glebius
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D54272
ffb64ba4a0
Joseph Mingrone (jrm) · 20250729
sysutils/cpu-microcode-amd: Update to 2025-07-29 snapshot

This snapshot updates firmware for processor family 19h and adds
firmware for processor family 1ah.

Linux firmware commit:
https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/amd-ucode?id=3768c184de68a85b9df6697e7f93a2f61de90a99

Sponsored by:	The FreeBSD Foundation
245c47b49d
Joseph Mingrone (jrm) · 20250708
sysutils/cpu-microcode-amd: Update to 2025-07-08 release

This update, in part, mitigates transient scheduler attacks affecting
some AMD CPUs.  For details, refer to AMD's security bulletin and white
paper:

- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7029.html
- https://www.amd.com/content/dam/amd/en/documents/resources/bulletin/technical-guidance-for-mitigating-transient-scheduler-attacks.pdf

Sponsored by:	The FreeBSD Foundation
bd4b2fd359
Joseph Mingrone (jrm) · 20241121
sysutils/cpu-microcode-amd: Update to 2024-11-21 snapshot

This snapshot contains updates for the 17h and 19h processor families.

Latest Linux Firmware repository commit since last update:
https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=48bb90cceb882cab8e9ab692bc5779d3bf3a13b8

Sponsored by:	The FreeBSD Foundation
2bf04cb214
Joseph Mingrone (jrm) · 20240810
sysutils/cpu-microcode-amd: Update to address guest memory vulnerabilities

For more information, refer to:

- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7014.html
- https://info.defcon.org/event/?id=54863
- https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=091bd5adf19c7ab01214c64689952acb483

Security:	7d631146-5769-11ef-b618-1c697a616631
Differential Revision:	https://reviews.freebsd.org/D46269
60a177caf1
Joseph Mingrone (jrm) · 20240116
sysutils/cpu-microcode-amd: Update to 2024-01-16 snapshot

Commits to the Linux Firmware repository since last update:
https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=bfc33c1e308e1ebd5f216781ea0b091c2379bbb2
https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=a193c6517fbfc0e7a4e2f8b06cb2742a82a8dd63

Reviewed by:	chs
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D44049
f88622cee4
Chuck Silvers (chs) · 20231019_1
sysutils/cpu-microcode*: support early loading of AMD ucode

Install the AMD ucode in /boot/firmware for early loading just like
is done for intel.  Update the instructions for early loading to
reflect that AMD is now supported too.

Sponsored By:	Netflix
Reviewed by:	jrm
Differential Revision:	https://reviews.freebsd.org/D44025
8972ab311c
Joseph Mingrone (jrm) · 20231019
sysutils/cpu-microcode-amd: Update to 2023-10-19 snapshot

Commit to the Linux Firmware repository:
https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=06afd7f939c5b245b2af9e0fee13026f2aaf77fa

Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D42573
31dcb831b9
Joseph Mingrone (jrm) · 20230808_1
cpu microcode ports: Take maintainership

While here, pet portclippy/portfmt.

Approved by:	seanc (past maintainer)
Sponsored by:	The FreeBSD Foundation
82c1d7a1b7
Joseph Mingrone (jrm) · 20230808
sysutils/cpu-microcode-amd: Update for 19h processor family

PR:		273238
Reported by:	Christos Chatzaras <chris@cretaforce.gr>
Approved by:	maintainer (sbruno, implicit)
Sponsored by:	The FreeBSD Foundation
32581ecbe9
Joseph Mingrone (jrm) · 20230724
sysutils/cpu-microcode-*: Reorganize CPU microcode ports

Prior to this update, sysutils/devcpu-data, which only contained an RC
script, had run dependencies on the AMD and Intel microcode ports.  This
made it cumbersome to have just the AMD or just the Intel microcode
ports installed.  With this change, the microcode ports now depend on
the RC script.

Other changes:

- Use more intuitive port names: cpu-microcode, cpu-microcode-amd,
  cpu-microcode-intel, and cpu-microcode-rc.
- Add the metaport, cpu-microcode, which pulls in all related ports.
- Pet portclippy/portfmt

Reviewed by:	lwhsu, markj
Approved by:	sbruno (maintainer)
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D41406
bc7829212d