{
  "fix": "amd64-microcode 3.20251202.1ubuntu1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-amd64-microcode-3.20251202.1ubuntu1",
  "summary": "amd64-microcode 3.20251202.1ubuntu1, released May 12, 2026, fixes 9 CVEs in amd64-microcode. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "package",
  "title": "amd64-microcode 3.20251202.1ubuntu1 for Ubuntu 26.04.1 LTS (resolute)",
  "released": "2026-05-12T21:16:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2024-36350, rated Critical",
  "supported": true,
  "cveCount": 9,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00494,
  "maxCvss": 7.8,
  "appliesTo": [
    {
      "product": "amd64-microcode",
      "productUrl": "https://patchblox.com/security/product/linux/amd64-microcode",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "3.20251202.1ubuntu1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2024-36350",
      "url": "https://patchblox.com/security/cve/CVE-2024-36350",
      "title": "AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 7.8,
      "epss": 0.00494,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-36357",
      "url": "https://patchblox.com/security/cve/CVE-2024-36357",
      "title": "AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 7.8,
      "epss": 0.00357,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-62626",
      "url": "https://patchblox.com/security/cve/CVE-2025-62626",
      "title": "amd64-microcode: Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values return...",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.7,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-52534",
      "url": "https://patchblox.com/security/cve/CVE-2025-52534",
      "title": "amd64-microcode: Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially result...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00353,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-29943",
      "url": "https://patchblox.com/security/cve/CVE-2025-29943",
      "title": "amd64-microcode: Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the C...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00226,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-0012",
      "url": "https://patchblox.com/security/cve/CVE-2025-0012",
      "title": "amd64-microcode: Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory co...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-36315",
      "url": "https://patchblox.com/security/cve/CVE-2024-36315",
      "title": "amd64-microcode: Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and po...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54514",
      "url": "https://patchblox.com/security/cve/CVE-2025-54514",
      "title": "amd64-microcode: Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-29934",
      "url": "https://patchblox.com/security/cve/CVE-2025-29934",
      "title": "amd64-microcode: A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entri...",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.3,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T07:45:43Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}