Proxmox host kernaal issue

[Swanand]

During validation found system report giving (PVE Hosts) vulnerable statement (Old microcode)



Upon checks in source list has component for free firmware too and apt CPU update for INTEL/AMD returning as latest code 3.X and no further updates available to install in kernel.



Bot Intel / AMD are up to date, look like bug, can a get help on this ?

 

[leesteken]

Did you install the latest motherboard BIOS/UEFI version and the latest firmware package: https://pve.proxmox.com/wiki/Firmware_Updates ?
Sometimes there simply is no firmware fix provided by the CPU manufacturer (which can be for various reasons) and your CPU stays vulnerable (but sometimes software can mitigate it, and sometimes not).

 

[Swanand]

Did you install the latest motherboard BIOS/UEFI version and the latest firmware package: https://pve.proxmox.com/wiki/Firmware_Updates ?
Sometimes there simply is no firmware fix provided by the CPU manufacturer (which can be for various reasons) and your CPU stays vulnerable (but sometimes software can mitigate it, and sometimes not).

yes I have upgraded it, Can this safely be ignored, or is it something that requires attention?"

 

[leesteken]

Can this safely be ignored, or is it something that requires attention?"

Impossible to say in general and you have given no specific information at all. In the end, it is up to you to assess the potential risks and determine how much effort/money you want to spend to reduce them.
EDIT: Almost all of this is not Proxmox or even GNU/Linux specific. There is a lot of public information, and discussion, about CPU vulnerabilities on the internet.