linux

mirror of https://github.com/raspberrypi/linux.git synced 2025-12-19 08:14:25 +00:00

Files

Borislav Petkov (AMD) 805b743fc1 x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches

All Zen5 machines out there should get BIOS updates which update to the
correct microcode patches addressing the microcode signature issue.
However, silly people carve out random microcode blobs from BIOS
packages and think are doing other people a service this way...

Block loading of any unreleased standalone Zen5 microcode patches.

Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Signed-off-by: Ingo Molnar <mingo@kernel.org>
Cc: <stable@kernel.org>
Cc: Andrew Cooper <andrew.cooper3@citrix.com>
Cc: Boris Ostrovsky <boris.ostrovsky@oracle.com>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Maciej S. Szmigiero <mail@maciej.szmigiero.name>
Cc: Nikolay Borisov <nik.borisov@suse.com>
Cc: Tom Lendacky <thomas.lendacky@amd.com>
Link: https://lore.kernel.org/r/20250410114222.32523-1-bp@kernel.org

2025-04-12 21:09:42 +02:00

amd_shas.c

x86/microcode/AMD: Load only SHA256-checksummed patches

2025-02-22 11:46:05 +01:00

amd.c

x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches

2025-04-12 21:09:42 +02:00

core.c

x86/microcode: Remove unused struct cpu_info_ctx

2024-05-06 11:00:57 +02:00

intel.c

x86/microcode: Update the Intel processor flag scan check