RDSEED cpu flag deactivated after updating to kernel 6.8.12-20-pve

[datenhain]

Hi,

today I was running into problems with live migration between two hosts with identical CPUs (AMD EPYC 9655) but different kernel versions.
I have a strong suspicion that we installed the RDSEED kernel patches but not the microcode updates (https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7055.html, CPU is still on 0xa0011d5)
Since all of the RDSEED related stuff happened in October 2025 and AMD release mitigations in October and November there's a high chance we're just running an unpatched CPU.

Are there plans to release microcode updates that address this?

Best Regards
André Hermbusch

 

[spirit]

you can try the firmware from debian testing:
http://ftp.de.debian.org/debian/poo...rocode/amd64-microcode_3.20251202.1_amd64.deb

(or upgrade your bios if your vendor provide it)

 

[datenhain]

Hi @spirit, thanks for your reply. Thats an option but i was wondering why the newer microcode packages were not released for pve-enterprise 8.x:
https://git.proxmox.com/?p=pve-firmware.git;a=summary

 

[spirit]

Hi @spirit, thanks for your reply. Thats an option but i was wondering why the newer microcode packages were not released for pve-enterprise 8.x:
https://git.proxmox.com/?p=pve-firmware.git;a=summary

I don't think that microcode has never been in pe-firmware package. It's always the debian package. (and debian can be a little bit slow to update them)