Re: [tip: x86/urgent] x86/CPU/AMD: Add RDSEED fix for Zen5

From: Pavel Machek

Date: Mon Nov 24 2025 - 17:19:13 EST


Hi!

> > Add a fix glue which checks microcode revisions.
> >
> > [ bp: Add microcode revisions checking, rewrite. ]
> >
> > Cc:stable@xxxxxxxxxxxxxxx
> > Signed-off-by: Gregory Price<gourry@xxxxxxxxxx>
> > Signed-off-by: Borislav Petkov (AMD)<bp@xxxxxxxxx>
> > Link:https://lore.kernel.org/r/20251018024010.4112396-1-gourry@xxxxxxxxxx
> > ---
> > arch/x86/kernel/cpu/amd.c | 10 ++++++++++
> > 1 file changed, 10 insertions(+)
> >
> > diff --git a/arch/x86/kernel/cpu/amd.c b/arch/x86/kernel/cpu/amd.c
> > index ccaa51c..bc29be6 100644
> > --- a/arch/x86/kernel/cpu/amd.c
> > +++ b/arch/x86/kernel/cpu/amd.c
> > @@ -1035,8 +1035,18 @@ static void init_amd_zen4(struct cpuinfo_x86 *c)
> > }
> > }
> > +static const struct x86_cpu_id zen5_rdseed_microcode[] = {
> > + ZEN_MODEL_STEP_UCODE(0x1a, 0x02, 0x1, 0x0b00215a),
> > + ZEN_MODEL_STEP_UCODE(0x1a, 0x11, 0x0, 0x0b101054),
> > +};
> > +

> This fix seems to break quite a bunch of users in CachyOS. There has been
> now several users reporting that there system can not get properly into the
> graphical interface.
>
> CachyOS is compiling the packages with -march=znver5 and the GCC compiler
> currently does pass RDSEED.

Besides other things, GCC should probably be fixed not to do that.

And this will be fun for both mainline and -stable: security bug or
broken boot, pick one :-(.

Best regards,
Pavel
--
I don't work for Nazis and criminals, and neither should you.
Boycott Putin, Trump, Netanyahu and Musk!

Attachment: signature.asc
Description: PGP signature