CVE catalog

CVE-2019-9836

amd64-microcode: CVE-2019-9836

[CVE catalog]

Severity
Medium · CVSS 4.7CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.61% · Oct 25, 2026

Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianamd64-microcodesid3.20251202.1fixed
Debianamd64-microcodeforky3.20251202.1fixed
Debianamd64-microcodetrixie3.20250311.1fixed
Debianamd64-microcodebookworm3.20250311.1~deb12u1fixed
Debianamd64-microcodebookworm-security3.20230719.1~deb12u1fixed
Opensusekernel-firmwareleap 15.020190618-lp151.2.6.1fixed
Opensusekernel-firmwareleap 15.120190618-lp151.2.6.1fixed
Susekernel-firmwarelinux enterprise desktop 12 sp420190618-5.8.1fixed
Susekernel-firmwarelinux enterprise server 12 sp420190618-5.8.1fixed
Susekernel-firmwarelinux enterprise server for sap applications 12 sp420190618-5.8.1fixed
Susekernel-firmwarelinux enterprise module for basesystem 15 sp120190618-3.3.1fixed
Susekernel-firmwarelinux enterprise module for basesystem 1520190618-3.22.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianamd64-microcodesourcesid3.20220411.1not yet assignedNot reported[970395]
Debianamd64-microcodesourceforky3.20220411.1not yet assignedNot reported[970395]
Debianamd64-microcodesourcetrixie3.20220411.1not yet assignedNot reported[970395]
Debianamd64-microcodesourcebookworm3.20220411.1not yet assignedNot reported[970395]
Opensusekernel-firmwarerpmleap 15.020190618-lp151.2.6.1Not reportedOPENSUSE-SU-2019:1770-1Not reported
Opensusekernel-firmwarerpmleap 15.120190618-lp151.2.6.1Not reportedOPENSUSE-SU-2019:1770-1Not reported
Susekernel-firmwarerpmlinux enterprise desktop 12 sp420190618-5.8.1Not reportedSUSE-SU-2019:1802-1Not reported
Susekernel-firmwarerpmlinux enterprise server 12 sp420190618-5.8.1Not reportedSUSE-SU-2019:1802-1Not reported
Susekernel-firmwarerpmlinux enterprise server for sap applications 12 sp420190618-5.8.1Not reportedSUSE-SU-2019:1802-1Not reported
Susekernel-firmwarerpmlinux enterprise module for basesystem 15 sp120190618-3.3.1Not reportedSUSE-SU-2019:1792-1Not reported
Susekernel-firmwarerpmlinux enterprise module for basesystem 1520190618-3.22.1Not reportedSUSE-SU-2019:1803-1Not reported

[Debian bug #970395]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [amd64-microcode]Fixed
    Details (1)

    • 3.20250311.1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.20220411.1

      dsa · amd64-microcode · debian · bookworm; dsa · amd64-microcode · debian · 12

[Debian 13 (Trixie)]

  • [amd64-microcode]Fixed
    Details (1)

    • 3.20250311.1 · amd64 · trixie

      Fixed · Fixed: 3.20220411.1

      dsa · amd64-microcode · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]