Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "amd64-microcode", "binary_version": "3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm1" } ] }
{ "cves": [], "ecosystem": "Ubuntu:Pro:16.04:LTS" }
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6244-1.json"
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "amd64-microcode", "binary_version": "3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm1" } ] }
{ "cves": [], "ecosystem": "Ubuntu:Pro:18.04:LTS" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "amd64-microcode", "binary_version": "3.20191218.1ubuntu1.1" } ] }
{ "cves": [], "ecosystem": "Ubuntu:20.04:LTS" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "amd64-microcode", "binary_version": "3.20191218.1ubuntu2.1" } ] }
{ "cves": [], "ecosystem": "Ubuntu:22.04:LTS" }