Vulnerable: No microcode

[bichitra1984]

Hi,
I am facing one problem on our proxmox server.
Shows "Vulnerability Reg file data sampling: Vulnerable: No microcode"

Please advise to us how to mitigate this issue.
Please note, we are using no-subscription repository.

Regards,
Bichitra

 

[Neobin]

1. Update the bios/UEFI to the most recent version provided by your mainboard vendor.
2. Install the corresponding microcode package: [1].

[1] https://pve.proxmox.com/pve-docs/chapter-sysadmin.html#sysadmin_firmware_cpu

[0a] https://docs.kernel.org/admin-guide/hw-vuln/reg-file-data-sampling.html
[0b] https://security-tracker.debian.org/tracker/CVE-2023-28746

 

[bichitra1984]

After executing not find anything for update firmware.
Please advise for next steps.

 

[Neobin]

Either you did not add the non-free-firmware component to (all of) the Debian repositories like described here: [1] and/or you did not (successfully) run apt update afterwards.

BTW: This all assumes, that you are running PVE (or PBS or PMG) 8 and not some older, already EOL, version...

[1] https://pve.proxmox.com/pve-docs/chapter-sysadmin.html#sysadmin_debian_firmware_repo

 

[bichitra1984]

I already reformat the system install the latest proxmox ISO. But found the same.

I am using pve-no-subscription APT Repositories.

 

[nfuzzy]

Hi,
I am facing one problem on our proxmox server.
Shows "Vulnerability Reg file data sampling: Vulnerable: No microcode"

Please advise to us how to mitigate this issue.
Please note, we are using no-subscription repository.

Regards,
Bichitra

View attachment 75867

Please see the example below. it fixed the issue.

Example​

Please see the example below, it fixed the issue. Replace the current lines by the new ones in the example
Example /etc/apt/sources.list
# ------------------------------
# Debian Bookworm Repositories
# ------------------------------

# Original line (disabled)
# deb http://deb.debian.org/debian bookworm main
# Corrected line:
deb http://deb.debian.org/debian bookworm main contrib non-free-firmware

# Original security repo (disabled)
# deb http://security.debian.org/debian-security bookworm-security main
# Corrected line:
deb http://security.debian.org/debian-security bookworm-security main contrib non-free-firmware

# Original updates repo (disabled)
# deb http://deb.debian.org/debian bookworm-updates main
# Corrected line:
deb http://deb.debian.org/debian bookworm-updates main contrib non-free-firmware