MGASA-2019-0207

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2019-9836
Published: 10 Jul 2019, 10:44
Last modified:16 Apr 2026, 04:26

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

10 Jul 2019, 10:44
Published
Vulnerability first disclosed
16 Apr 2026, 04:26
Last Modified
Vulnerability information updated

Description

Updated microcode package fixes security vulnerability Secure Encrypted Virtualization (SEV) on Advanced Micro Devices(AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation. This update provides Amd SEV Firmware to 0.17 build 22 (CVE-2019-9836). It also updates the Intel Microcode for the following: * SNB-E/EN/EP C1/M0 6-2d-6/6d 0000061d->0000061f Xeon E3/E5, Core X * SNB-E/EN/EP C2/M1 6-2d-7/6d 00000714->00000718 Xeon E3/E5, Core X

Affected Systems

  • mageia•microcode

    < 0.20190618-1.mga6.nonfree

  • mageia•microcode

    < 0.20190618-1.mga7.nonfree

References (2)