Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-52534

Fixed in a distro release EPSS <1%CVSS 5.3

Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity.

Published 2026-02-10 · CVE record · OSV

Products: AMD EPYC™ 9005 Series Processors

Distro releases

ReleasePackageFixed in
Debian 12amd64-microcodeno fix
Debian 13amd64-microcodeno fix
Debian 14amd64-microcodeno fix
Ubuntu 14.04 LTSamd64-microcodeno fix
Ubuntu 20.04 LTSamd64-microcodeno fix
Ubuntu 22.04 LTSamd64-microcodeno fix
Ubuntu 24.04 LTSamd64-microcode3.20251202.1ubuntu0.24.04.1
Ubuntu 25.10amd64-microcode3.20251202.1ubuntu0.25.10.1
Ubuntu 26.04 LTSamd64-microcode3.20251202.1ubuntu1
Ubuntu Pro 16.04 LTSamd64-microcodeno fix
Ubuntu Pro 18.04 LTSamd64-microcodeno fix