The vulnerability of AMD64 Microcode in processor microcodes, related to incorrect code generation, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

🗓️ 09 Apr 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

AMD64 microcode vulnerability allows access to data, compromise integrity, and cause service failures.

Reporter	Title	Published	Views	Family All 129
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in linux-firmware (CVE-2023-20584, CVE-2023-31315, CVE-2023-31356) affect Power HMC.	15 Apr 202503:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities	30 Jan 202513:31	–	ibm
FreeBSD	AMD CPUs -- Guest Memory Vulnerabilities	9 Aug 202400:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : iwl100-firmware, iwl105-firmware, iwl135-firmware (ALAS2023-2024-706)	19 Aug 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : linux-firmware (ALAS-2024-2626)	21 Aug 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0223: linux-firmware (ALINUX3-SA-2024:0223)	14 May 202500:00	–	nessus
Tenable Nessus	Fedora 41 : linux-firmware (2024-3cd42e9e29)	14 Nov 202400:00	–	nessus
Tenable Nessus	Fedora 39 : linux-firmware (2024-3dbf10c949)	17 Sep 202400:00	–	nessus
Tenable Nessus	Fedora 40 : linux-firmware (2024-f32e633786)	11 Sep 202400:00	–	nessus

Vulners

Node

advanced_micro_devices amd64_microcodeRange<3.20240710.1

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-31315
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-31315
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17
amd	www.amd.com/en/resources/product-security/bulletin/amd-sb-7014.html
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.14/
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16
web	www.web.nvd.nist.gov/view/vuln/detail

20 Jan 2026 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 25.9

CVSS 37.5

EPSS0.00622

processor microcode data confidentiality integrity compromise service disruptions microcode vulnerability