Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix __apply_microcode_amd()'s return value When verify_sha256_digest() fails, __apply_microcode_amd() should propagate the failure by returning false (and not -1 which is promoted to true).
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected bef830144febedb7de86863ae99d8f53bed76e95 before 763f4d638f71cb45235395790a46e9f9e84227fd; affected 3e8653e399e7111a3e87d534ff4533b250ae574f before ada88219d5315fc13f2910fe278c7112d8d68889; affected c162ba4f45ab6ef3b7114af6fb419f1833f050c0 before d295c58fad1d5ab987a81f139dd21498732c4f13; affected 50cef76d5cb0e199cda19f026842560f6eedc4f7 before 7f705a45f130a85fbf31c2abdc999c65644c8307; affected 50cef76d5cb0e199cda19f026842560f6eedc4f7 before 31ab12df723543047c3fc19cb8f8c4498ec6267f; affected 6.6.81 before 6.6.87; affected 6.12.18 before 6.12.23; affected 6.13.6 before 6.13.11 |
| Linux / Linux | affected 6.14; unaffected 0 before 6.14; unaffected 6.6.87 through 6.6.*; unaffected 6.12.23 through 6.12.*; unaffected 6.13.11 through 6.13.*; unaffected 6.14.2 through 6.14.*; unaffected 6.15 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/763f4d638f71cb45235395790a46e9f9e84227fd
- https://git.kernel.org/stable/c/ada88219d5315fc13f2910fe278c7112d8d68889
- https://git.kernel.org/stable/c/d295c58fad1d5ab987a81f139dd21498732c4f13
- https://git.kernel.org/stable/c/7f705a45f130a85fbf31c2abdc999c65644c8307
- https://git.kernel.org/stable/c/31ab12df723543047c3fc19cb8f8c4498ec6267f