Bug#1120005: amd64-microcode: CVE-2025-62626

Salvatore Bonaccorso <[email protected]> Mon, 03 Nov 2025 20:58:32 +0100

Newsgroups	gmane.linux.debian.ports.amd64
Message-ID	<176219991240.1696236.10103088893960916671.reportbug__42523.1239338004$1762200088$gmane$org@eldamar.lan>

Source: amd64-microcode
Version: 3.20250311.1
Severity: important
Tags: security upstream
X-Debbugs-Cc: [email protected], [email protected], Debian Security Team <[email protected]>
User: [email protected]
Usertags: amd64

Hi,

The following vulnerability was published for amd64-microcode.

CVE-2025-62626[0]:
| RDSEED Failure on AMD Zen 5 Processors

Filling mainly for visibility, the same argumets we have for the other
pending amd64-microcode updates to not be able to update, at least [1]
mentions that a future update might include a fix, FWIW.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2025-62626
    https://www.cve.org/CVERecord?id=CVE-2025-62626
[1] https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7055.html

Regards,
Salvatore