Catalogo CVE

CVE-2024-56161

AMD Microcode vulnerabilities

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.

Gravità: High · CVSS 7.2CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Published: Jan 1, 2024, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.53% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie	amd64-microcode	`3.20250311.1`	FixedDistribution-reported fixed boundary	[CVE-2024-56161]
Debiansid	amd64-microcode	`3.20250311.1`	FixedDistribution-reported fixed boundary	[CVE-2024-56161]
Debiansid	amd64-microcode	`3.20251202.1`	Fixed	[CVE-2024-56161]
Debianforky	amd64-microcode	`3.20250311.1`	FixedDistribution-reported fixed boundary	[CVE-2024-56161]
Debianforky	amd64-microcode	`3.20251202.1`	Fixed	[CVE-2024-56161]
Debianbookworm	amd64-microcode	`3.20250311.1~deb12u1`	FixedDistribution-reported fixed boundary	[CVE-2024-56161]

Showing 6 fix observations. All 18 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	amd64-microcode	`3.20250311.1ubuntu0.24.04.1`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	amd64-microcode	`3.20250311.1~deb12u1`	UnknownSource applicability is not established	Provider not reported
Debianbookworm	amd64-microcode	`3.20250311.1~deb12u1`	FixedDistribution-reported fixed boundary	[CVE-2024-56161]
Debianbookworm-security	amd64-microcode	`3.20230719.1~deb12u1`	Affected	[CVE-2024-56161]
Debianforky	amd64-microcode	`3.20250311.1`	FixedDistribution-reported fixed boundary	[CVE-2024-56161]
Debianforky	amd64-microcode	`3.20251202.1`	Fixed	[CVE-2024-56161]
Debiansid	amd64-microcode	`3.20250311.1`	FixedDistribution-reported fixed boundary	[CVE-2024-56161]
Debiansid	amd64-microcode	`3.20251202.1`	Fixed	[CVE-2024-56161]
Debiantrixie	amd64-microcode	`3.20250311.1`	FixedDistribution-reported fixed boundary	[CVE-2024-56161]
Ubuntu24.04	amd64-microcode	`3.20230808.1.1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-56161]Feb 4, 2026, 3:34:26 AM UTC
Ubuntu24.04	amd64-microcode	`3.20231019.1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-56161]Feb 4, 2026, 3:34:26 AM UTC
Ubuntu24.04	amd64-microcode	`3.20231019.1ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-56161]Feb 4, 2026, 3:34:26 AM UTC
Ubuntu24.04	amd64-microcode	`3.20231019.1ubuntu2.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-56161]Feb 4, 2026, 3:34:26 AM UTC
Ubuntu24.04	amd64-microcode	`3.20250311.1ubuntu0.24.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-56161]Feb 4, 2026, 3:34:26 AM UTC
Ubuntu25.04	amd64-microcode	`3.20240116.2+nmu1ubuntu1`	UnknownSource applicability is not established	[USN-7560-1]Feb 4, 2026, 2:52:00 AM UTC
Ubuntu25.04	amd64-microcode	`3.20240116.2+nmu1ubuntu1.1`	UnknownSource applicability is not established	[USN-7560-1]Feb 4, 2026, 2:52:00 AM UTC
Ubuntu25.04	amd64-microcode	`3.20240820.1ubuntu1`	UnknownSource applicability is not established	[USN-7560-1]Feb 4, 2026, 2:52:00 AM UTC
Ubuntu25.04	amd64-microcode	`3.20250311.1ubuntu0.25.04.1`	UnknownSource applicability is not established	[USN-7560-1]Feb 4, 2026, 2:52:00 AM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "amd64-microcode",
      "status": "fixed",
      "release": "sid",
      "version": "3.20251202.1"
    },
    {
      "name": "amd64-microcode",
      "status": "fixed",
      "release": "forky",
      "version": "3.20251202.1"
    },
    {
      "name": "amd64-microcode",
      "status": "fixed",
      "release": "trixie",
      "version": "3.20250311.1"
    },
    {
      "name": "amd64-microcode",
      "status": "fixed",
      "release": "bookworm",
      "version": "3.20250311.1~deb12u1"
    },
    {
      "name": "amd64-microcode",
      "status": "vulnerable",
      "release": "bookworm-security",
      "version": "3.20230719.1~deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1095470,
      "name": "amd64-microcode",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "3.20250311.1"
    },
    {
      "bug": 1095470,
      "name": "amd64-microcode",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "3.20250311.1"
    },
    {
      "bug": 1095470,
      "name": "amd64-microcode",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "3.20250311.1"
    },
    {
      "bug": 1095470,
      "name": "amd64-microcode",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "3.20250311.1~deb12u1"
    }
  ],
  "distribution_packages": [
    {
      "name": "amd64-microcode",
      "fixed_version": "3.20250311.1~deb12u1",
      "applicability_unknown": true
    },
    {
      "name": "amd64-microcode",
      "fixed_version": "3.20250311.1ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "amd64-microcode",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.20250311.1ubuntu0.24.04.1"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "3.20230808.1.1ubuntu1",
        "3.20231019.1ubuntu1",
        "3.20231019.1ubuntu2",
        "3.20231019.1ubuntu2.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-56161",
      "fixed_version": "3.20250311.1ubuntu0.24.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-56161",
      "provider_updated_at": "2026-02-04T03:34:26.371165Z",
      "applicability_unknown": true
    },
    {
      "name": "amd64-microcode",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.20250311.1ubuntu0.25.04.1"
            }
          ]
        }
      ],
      "release": "25.04",
      "versions": [
        "3.20240116.2+nmu1ubuntu1",
        "3.20240116.2+nmu1ubuntu1.1",
        "3.20240820.1ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-7560-1",
      "fixed_version": "3.20250311.1ubuntu0.25.04.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-7560-1",
      "provider_updated_at": "2026-02-04T02:52:00.997332Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #1095470]

OpenFactory catalog packages

L’associazione dei pacchetti è in corso.

[Debian 12 (Bookworm)]

[amd64-microcode]Sconosciuto
Dettagli (1)
- 3.20250311.1~deb12u1 · amd64 · bookworm
  Corretta · Corretta: 3.20250311.1~deb12u1
  usn · amd64-microcode · debian · bookworm; usn · amd64-microcode · debian · 12

[Debian 13 (Trixie)]

[amd64-microcode]Sconosciuto
Dettagli (1)
- 3.20250311.1 · amd64 · trixie
  Corretta · Corretta: 3.20250311.1
  usn · amd64-microcode · debian · 13

Osservato: Oct 28, 2026, 5:40:09 PM UTC

Riferimenti

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]