Vulnerable: No microcode

[bichitra1984]

Hi,
I am facing one problem on our proxmox server.
Shows "Vulnerability Reg file data sampling: Vulnerable: No microcode"

Please advise to us how to mitigate this issue.
Please note, we are using no-subscription repository.

Regards,
Bichitra

 

[Neobin]

1. Update the bios/UEFI to the most recent version provided by your mainboard vendor.
2. Install the corresponding microcode package: [1].

[1] https://pve.proxmox.com/pve-docs/chapter-sysadmin.html#sysadmin_firmware_cpu

[0a] https://docs.kernel.org/admin-guide/hw-vuln/reg-file-data-sampling.html
[0b] https://security-tracker.debian.org/tracker/CVE-2023-28746

 

[bichitra1984]

After executing not find anything for update firmware.
Please advise for next steps.

 

[Neobin]

Either you did not add the non-free-firmware component to (all of) the Debian repositories like described here: [1] and/or you did not (successfully) run apt update afterwards.

BTW: This all assumes, that you are running PVE (or PBS or PMG) 8 and not some older, already EOL, version...

[1] https://pve.proxmox.com/pve-docs/chapter-sysadmin.html#sysadmin_debian_firmware_repo

 

[bichitra1984]

I already reformat the system install the latest proxmox ISO. But found the same.

I am using pve-no-subscription APT Repositories.