What’s Vulnerable › Vulnerabilities

CVE-2025-22047: x86/microcode/AMD: Fix __apply_microcode_amd()'s return value

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-16 · updated 2026-07-30

Description

In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix __apply_microcode_amd()'s return value When verify_sha256_digest() fails, __apply_microcode_amd() should propagate the failure by returning false (and not -1 which is promoted to true).

Affected products

• Linux kernel: from 6.6.81 before 6.6.87; from 6.12.18 before 6.12.23; from 6.13.6 before 6.13.11; 6.14, 6.14-rc6, 6.14-rc7, 6.14.1 — fixed in 6.12.23, 6.13.11, 6.6.87

How to fix

Upgrade to a fixed version: Linux kernel 6.12.23, 6.13.11, 6.6.87. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/31ab12df723543047c3fc19cb8f8c4498ec6267f
• https://git.kernel.org/stable/c/763f4d638f71cb45235395790a46e9f9e84227fd
• https://git.kernel.org/stable/c/7f705a45f130a85fbf31c2abdc999c65644c8307
• https://git.kernel.org/stable/c/ada88219d5315fc13f2910fe278c7112d8d68889
• https://git.kernel.org/stable/c/d295c58fad1d5ab987a81f139dd21498732c4f13

Get alerted when CVE-2025-22047 or the next vulnerability affects your stack