Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.

The remote Ubuntu 25.04 host has a package installed that is affected by a vulnerability as referenced in the USN-7560-1 advisory.

    Josh Eads, Kristoffer Janke, Eduardo Nava, Tavis Ormandy and Matteo Rizzo discovered that AMD Microcode     incorrectly verified signatures. An attacker with local administrator privilege could possibly use this     issue to cause loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7561-1 advisory.

    It was discovered that AMD Microcode incorrectly handled memory addresses. An attacker with local     administrator privilege could possibly use this issue to cause loss of integrity of a confidential guest     running under AMD SEV-SNP. (CVE-2023-20584, CVE-2023-31356)

    Josh Eads, Kristoffer Janke, Eduardo Nava, Tavis Ormandy and Matteo Rizzo discovered that AMD Microcode     incorrectly verified signatures. An attacker with local administrator privilege could possibly use this     issue to cause loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.
    (CVE-2024-56161)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4098 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4098-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Tobias Frost     March 31, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : amd64-microcode     Version        : 3.20250311.1~deb11u1     CVE ID         : CVE-2024-56161     Debian Bug     : 1095470

    A potential vulnerability has been found for certain AMD platforms which     creates a possible confidential computing vulnerability.

    AMD has released updated microcode to prevent an attacker from loading     tampered microcode.

    Additionally an SEV firmware update might be required for some platforms     to support SEV-SNP attestation, which may also necessitate a BIOS     update.

    For details please see the AMD security bulletin AMD-SB-3019.

    CVE-2024-56161 (AMD-SB-3019):

        Improper signature verification in AMD CPU ROM microcode patch         loader may allow an attacker with local administrator privileges to         load malicious CPU microcode resulting in loss of confidentiality         and integrity of a confidential guest running under AMD SEV-SNP.

    For Debian 11 bullseye, this problem has been fixed in version     3.20250311.1~deb11u1.

    We recommend that you upgrade your amd64-microcode packages.

    For the detailed security status of amd64-microcode please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/amd64-microcode

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local     administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity     of a confidential guest running under AMD SEV-SNP. (CVE-2024-56161)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
238161	Ubuntu 25.04 : AMD Microcode vulnerability (USN-7560-1)	Nessus	Ubuntu Local Security Checks	high
238066	Ubuntu 24.04 LTS / 24.10 : AMD Microcode vulnerabilities (USN-7561-1)	Nessus	Ubuntu Local Security Checks	medium
233550	Debian dla-4098 : amd64-microcode - security update	Nessus	Debian Local Security Checks	high
230750	Linux Distros Unpatched Vulnerability : CVE-2024-56161	Nessus	Misc.	high

Detections

Analytics

CVE-2024-56161

high

Tenable Plugins

high

medium

high

high