There are 2 open security issues in bookworm.
2 important issues:
- CVE-2024-36350:
A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.
- CVE-2024-36357:
A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.
1 issue that should be fixed with the next stable update:
- CVE-2024-56161:
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/a/amd64-microcode.png){kind=link}