CVE-2025-22047 — Incorrect Check of Function Return Value in Linux
Severity
5.5MEDIUMNVD
OSV7.1OSV5.9
EPSS
0.1%
top 80.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 16
Latest updateJan 9
Description
In the Linux kernel, the following vulnerability has been resolved:
x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
When verify_sha256_digest() fails, __apply_microcode_amd() should propagate
the failure by returning false (and not -1 which is promoted to true).
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages5 packages
▶CVEListV5linux/linuxbef830144febedb7de86863ae99d8f53bed76e95 — 763f4d638f71cb45235395790a46e9f9e84227fd+5