FS#56951 - [linux-firmware] [linux] microcode_amd_fam17h.bin available for Spectre vulnerability from OpenSUSE

Attached to Project: Arch Linux
Opened by Kyle Devir (QuartzDragon) - Thursday, 04 January 2018, 17:40 GMT
Last edited by Laurent Carlier (lordheavy) - Monday, 21 May 2018, 06:46 GMT
Task Type Bug Report
Category Upstream Bugs
Status Closed
Assigned To Tobias Powalowski (tpowa)
Jan Alexander Steffens (heftig)
Laurent Carlier (lordheavy)
Architecture x86_64
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 3
Private No

Details

OpenSUSE released an announcement about "microcode_amd_fam17h.bin" being available.

A search on Google seems to suggest that they are sole providers of the microcode update right now, as the linux-firmware tree has no updates regarding it.

A bit of searching found that the microcode update is supplied in this RPM package:

https://download.opensuse.org/repositories/home:/michals/openSUSE_Leap_42.2_Ports/src/kernel-firmware-20180104-205.1.src.rpm

It is found here, under other versions, under unstable:

https://software.opensuse.org/package/kernel-firmware

I must admit I find it slightly weird that they have the firmware ahead of everyone else, with AMD providing no official annoucement on the kernel mailing lists, nor submitting it to linux-firmware pronto.

Anyway, I hope this gets pushed out quickly enough.
This task depends upon

Closed by  Laurent Carlier (lordheavy)
Monday, 21 May 2018, 06:46 GMT
Reason for closing:  Fixed
Additional comments about closing:  linux-firmware 20180518.2a9b2cf-1
Comment by Sergio Correia (sergio.correia) - Thursday, 04 January 2018, 20:18 GMT
I built an updated linux-firmware package with the microcode_amd_fam17h.bin file from the rpm you linked, to check it out, but I was not very sucessfull:

[ 713.804179] microcode: patch size mismatch
[ 713.804182] microcode: Patch-ID 0x08001213: size mismatch
Comment by Sergio Correia (sergio.correia) - Thursday, 04 January 2018, 20:32 GMT
OK, found my issue: I need this patch in order to load a family 17h firmware: https://github.com/torvalds/linux/commit/f4e9b7af0cd58dd039a0fb2cd67d57cea4889abf. Current -stable does not carry it: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/tree/arch/x86/kernel/cpu/microcode/amd.c?h=v4.14.11#n472
Comment by Sergio Correia (sergio.correia) - Friday, 05 January 2018, 19:59 GMT
Ah, forgot to report back: after the aforementioned patch, the error about size mismatch was gone, but the microcode version did not change. After some debugging in arch/x86/kernel/cpu/microcode/amd.c, it looks like that particular microcode targets epyc-only (800f12). I was testing with a ryzen 5 1600 (800f11).
Comment by Levente Polyak (anthraxx) - Wednesday, 10 January 2018, 13:31 GMT
linux firmware size load patch present in v4.14.13 and v4.9.76

Loading...