Zenbleed - CVE-2023-20593

[Hyien]

Does amd64-microcode 3.20230719.1 fix the issue?
I installed this, rebooted and the zenbleed poc exploit no longer prints strings.

 

[aaron]

Does amd64-microcode 3.20230719.1 fix the issue?

see:

If you need it quickly and your vendor does not provide a newer BIOS with current µcode updates, a recent version is available in Debian unstable (3.20230719.1): https://packages.debian.org/search?...hon=names&suite=all&section=non-free-firmware

I installed this, rebooted and the zenbleed poc exploit no longer prints strings.

I would say that is a good indication that it worked.

 

[TheMrg]

What says
cat /pro/cpuinfo
as your microcode?

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1041863

 

[Hyien]

microcode : 0x830107a

 

[i_am_jam]

According to AMD for Zen2 Rome CPU microcode 0x830107b is recommended as per https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7008.html
This is contained within

amd64-microcode_3.20240116.2+nmu1_amd64.deb

in the unstable/testing repos. https://tracker.debian.org/pkg/amd64-microcode