Bug#1050780: amd64-microcode: AMD Ryzen 9 5900HX Speculative Return Stack Overflow

[vmxev...@gmail.com]

Package: amd64-microcode
Version: 3.20230808.1.1
Severity: important

Dear Maintainer,

I am a bit concerned about a security warning I find on my debian
trixie.
I had applied the software mitigation as per some links I found
googling around

GRUB_CMDLINE_LINUX_DEFAULT="quiet usbcore.autosuspend=-1 nvidia-
drm.modeset=1 tsc=nowatchdog pcie_aspm=off
spec_store_bypass_disable=on"

I would like to find a microcode update that takes care of this issue,
if possible.

uname -a
Linux ghost 6.5.0 #2 SMP PREEMPT_DYNAMIC Mon Aug 28 12:19:05 CEST 2023
x86_64 GNU/Linux
[ 0.069591]: Speculative Return Stack Overflow IBPB-extending
microcode not applied!
[ 0.069592] Speculative Return Stack Overflow: Mitigation: safe RET,
no microcode
[ 3.673179] microcode: CPU0: patch_level=0x0a50000c
[ 3.673185] microcode: CPU8: patch_level=0x0a50000c
[ 3.673186] microcode: CPU9: patch_level=0x0a50000c
[ 3.673186] microcode: CPU11: patch_level=0x0a50000c
[ 3.673186] microcode: CPU10: patch_level=0x0a50000c
[ 3.673186] microcode: CPU1: patch_level=0x0a50000c
[ 3.673193] microcode: CPU3: patch_level=0x0a50000c
[ 3.673193] microcode: CPU2: patch_level=0x0a50000c
[ 3.673193] microcode: CPU4: patch_level=0x0a50000c
[ 3.673193] microcode: CPU5: patch_level=0x0a50000c
[ 3.673196] microcode: CPU7: patch_level=0x0a50000c
[ 3.673196] microcode: CPU6: patch_level=0x0a50000c
[ 3.673196] microcode: CPU13: patch_level=0x0a50000c
[ 3.673196] microcode: CPU12: patch_level=0x0a50000c
[ 3.673201] microcode: CPU14: patch_level=0x0a50000c
[ 3.673201] microcode: CPU15: patch_level=0x0a50000c
[ 3.673219] microcode: Microcode Update Driver: v2.2.
grep 'model\|microcode' /proc/cpuinfo
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c
model : 80
model name : AMD Ryzen 9 5900HX with Radeon Graphics
microcode : 0xa50000c


thanks in advance



-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.5.0 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

amd64-microcode depends on no packages.

Versions of packages amd64-microcode recommends:
ii  initramfs-tools  0.142

amd64-microcode suggests no packages.

-- no debconf information