[Git][security-tracker-team/security-tracker][master] Reassociate some NFUs for AMD with amd64-microcode

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
80e844e4 by Salvatore Bonaccorso at 2026-11-02T08:35:55+01:00
Reassociate some NFUs for AMD with amd64-microcode

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -241840,7 +241840,7 @@ CVE-2025-48514 (Insufficient Granularity of Access Control in SEV firmware can a
 	- amd64-microcode 3.20260923.1
 	NOTE: https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html
 CVE-2025-48509 (Missing Checks in certain functions related to RMP initialization can  ...)
-	NOT-FOR-US: AMD
+	- amd64-microcode 3.20260923.1
 CVE-2025-40587 (A vulnerability has been identified in Polarion V2404 (All versions <  ...)
 	NOT-FOR-US: Siemens
 CVE-2025-36522 (Incorrect default permissions for some Intel(R) Chipset Software befor ...)
@@ -241894,7 +241894,7 @@ CVE-2025-30513 (Race condition for some TDX Module within Ring 0: Hypervisor may
 CVE-2025-30508 (Improper authorization in the Intel(R) Quick Assist Technology for som ...)
 	NOT-FOR-US: Intel
 CVE-2025-29952 (Improper Initialization within the AMD Secure Encrypted Virtualization ...)
-	NOT-FOR-US: AMD
+	- amd64-microcode 3.20260923.1
 CVE-2025-29951 (A buffer overflow in the AMD Secure Processor (ASP) bootloader could a ...)
 	NOT-FOR-US: AMD
 CVE-2025-29950 (Improper input validation in system management mode (SMM) could allow  ...)
@@ -241902,11 +241902,11 @@ CVE-2025-29950 (Improper input validation in system management mode (SMM) could
 CVE-2025-29949 (Insufficient input parameter sanitization in AMD Secure Processor (ASP ...)
 	NOT-FOR-US: AMD
 CVE-2025-29948 (Improper access control in AMD Secure Encrypted Virtualization (SEV) f ...)
-	NOT-FOR-US: AMD
+	- amd64-microcode 3.20260923.1
 CVE-2025-29946 (Insufficient or Incomplete Data Removal in Hardware Component in SEV f ...)
-	NOT-FOR-US: AMD
+	- amd64-microcode 3.20260923.1
 CVE-2025-29939 (Improper access control in secure encrypted virtualization (SEV) could ...)
-	NOT-FOR-US: AMD
+	- amd64-microcode 3.20260923.1
 CVE-2025-27940 (Out-of-bounds read for some TDX Module before version tdx1.5 within Ri ...)
 	NOT-FOR-US: Intel
 CVE-2025-27708 (Out-of-bounds read in the firmware for some Intel(R) Converged Securit ...)
@@ -241960,11 +241960,11 @@ CVE-2025-11242 (Server-Side Request Forgery (SSRF) vulnerability in Teknolist Co
 CVE-2025-11004 (The Simplicity Device Manager Tool has a Reflected XSS (Cross-site-scr ...)
 	NOT-FOR-US: Silicon Labs
 CVE-2025-0031 (A use after free in the SEV firmware could allow a malicous hypervisor ...)
-	NOT-FOR-US: AMD
+	- amd64-microcode 3.20260923.1
 CVE-2025-0029 (Improper handling of error condition during host-induced faults can al ...)
-	NOT-FOR-US: AMD
+	- amd64-microcode 3.20260923.1
 CVE-2025-0012 (Improper handling of overlap between the segmented reverse map table ( ...)
-	NOT-FOR-US: AMD
+	- amd64-microcode 3.20260923.1
 CVE-2024-54192 (An issue inTcpreplay v4.5.1 allows a local attacker to cause a denial  ...)
 	TODO: check
 CVE-2024-52334 (A vulnerability has been identified in syngo.plaza VB30E (All versions ...)
@@ -241976,7 +241976,7 @@ CVE-2024-36311 (A Time-of-check time-of-use (TOCTOU) race condition in the SMM c
 CVE-2024-36310 (Improper input validation in the SMM communications buffer could allow ...)
 	NOT-FOR-US: AMD
 CVE-2024-21953 (Improper input validation in IOMMU could allow a malicious hypervisor  ...)
-	NOT-FOR-US: AMD
+	- amd64-microcode 3.20260923.1
 CVE-2026-25506 (MUNGE is an authentication service for creating and validating user cr ...)
 	{DSA-6129-1 DLA-4477-1}
 	- munge 0.5.16-1.1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80e844e405c75903db23f50fdc4ddd88193596a6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80e844e405c75903db23f50fdc4ddd88193596a6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261102/bc43854f/attachment.htm>