Vulnerability
Microcode Signature Verification
A weakness in how AMD processors verify microcode signatures lets an administrator load microcode AMD did not sign, from Zen to Zen 5.
- Kind
- Other
- CVEs
- 3
- Published
- 2025
CVEs
| CVE | Name | Vendors | Published |
|---|---|---|---|
| CVE-2024-36347 | Microcode Signature Verification | AMD | 2025-06-27 |
| CVE-2024-56161 | Microcode Signature Verification: SEV-SNP | AMD | 2025-02-03 |
| CVE-2025-0032 | Microcode Patch Loading Cleanup (described below) | AMD | 2025-09-06 |
CVEs without a page of their own
The sources give these CVEs too few facts of their own (affected processors, a mitigation, a check) for a page; this is what they say.
CVE-2025-0032: Microcode Patch Loading Cleanup
Improper cleanup in microcode patch loading lets an administrator load malicious microcode on EPYC 9005 (Turin); fixed in Turin PI 1.0.0.4. AMD-SB-3014. Source. CVE record (2025-09-06).