CVE-2025-22047

x86/microcode/AMD: Fix __apply_microcode_amd()'s return value

MEDIUM

5.5

CVSS Score

Published: April 16, 2025 at 02:12 PM UTC

Updated: August 5, 2026 at 12:44 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix __apply_microcode_amd()'s return value When verify_sha256_digest() fails, __apply_microcode_amd() should propagate the failure by returning false (and not -1 which is promoted to true).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

6.12.18 ≤ v < 6.12.236.13.6 ≤ v < 6.13.116.14 ≤ v < 6.14.26.14 ≤ v < 6.156.6.81 ≤ v < 6.6.873e8653e399e7111a3e87d534ff4533b250ae574f50cef76d5cb0e199cda19f026842560f6eedc4f76.12.18 6.13.6 6.14 6.14 rc6 6.14 rc7 6.14.1 6.6.81bef830144febedb7de86863ae99d8f53bed76e95c162ba4f45ab6ef3b7114af6fb419f1833f050c0

Vendor states this is fixed in 31ab12df723543047c3fc19cb8f8c4498ec6267f (fixed)

Vendor states this is fixed in 763f4d638f71cb45235395790a46e9f9e84227fd (fixed)

Vendor states this is fixed in 7f705a45f130a85fbf31c2abdc999c65644c8307 (fixed)

Vendor states this is fixed in ada88219d5315fc13f2910fe278c7112d8d68889 (fixed)

Vendor states this is fixed in d295c58fad1d5ab987a81f139dd21498732c4f13 (fixed)

Vendor states this is fixed in 6.12.23 (unaffected)

Vendor states this is fixed in 6.13.11 (unaffected)

Vendor states this is fixed in 6.14 (unaffected)

Vendor states this is fixed in 6.14.2 (unaffected)

Vendor states this is fixed in 6.15 (unaffected)

Vendor states this is fixed in 6.6.87 (unaffected)