CVE-2025-22047

x86/microcode/AMD: Fix __apply_microcode_amd()'s return value

State: Published
Severity: 7.8 High
Published: Apr 16, 2025
Updated: Aug 5, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/microcode/AMD: Fix __apply_microcode_amd()'s return value

When verify_sha256_digest() fails, __apply_microcode_amd() should propagate the failure by returning false (and not -1 which is promoted to true).

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bef830144febedb7de86863ae99d8f53bed76e95 to before 763f4d638f71cb45235395790a46e9f9e84227fdAffected 3e8653e399e7111a3e87d534ff4533b250ae574f to before ada88219d5315fc13f2910fe278c7112d8d68889Affected c162ba4f45ab6ef3b7114af6fb419f1833f050c0 to before d295c58fad1d5ab987a81f139dd21498732c4f13Affected 50cef76d5cb0e199cda19f026842560f6eedc4f7 to before 7f705a45f130a85fbf31c2abdc999c65644c8307Affected 50cef76d5cb0e199cda19f026842560f6eedc4f7 to before 31ab12df723543047c3fc19cb8f8c4498ec6267fAffected 6.6.81 to before 6.6.87Affected 6.12.18 to before 6.12.23Affected 6.13.6 to before 6.13.11Affected
LinuxLinux	6.14Affected before 6.14Not affected 6.6.87 through 6.6.Not affected 6.12.23 through 6.12.Not affected 6.13.11 through 6.13.Not affected 6.14.2 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

bef830144febedb7de86863ae99d8f53bed76e95 to before 763f4d638f71cb45235395790a46e9f9e84227fdAffected
3e8653e399e7111a3e87d534ff4533b250ae574f to before ada88219d5315fc13f2910fe278c7112d8d68889Affected
c162ba4f45ab6ef3b7114af6fb419f1833f050c0 to before d295c58fad1d5ab987a81f139dd21498732c4f13Affected
50cef76d5cb0e199cda19f026842560f6eedc4f7 to before 7f705a45f130a85fbf31c2abdc999c65644c8307Affected
50cef76d5cb0e199cda19f026842560f6eedc4f7 to before 31ab12df723543047c3fc19cb8f8c4498ec6267fAffected
6.6.81 to before 6.6.87Affected
6.12.18 to before 6.12.23Affected
6.13.6 to before 6.13.11Affected

LinuxLinux

6.14Affected
before 6.14Not affected
6.6.87 through 6.6.*Not affected
6.12.23 through 6.12.*Not affected
6.13.11 through 6.13.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.