intel / intel/Intel-Linux-Processor-Microcode-Data-Files

Conflict with microcode-updates via lvfs? / issues with ucode-updates on not-affected CPU?

Open
#86 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
818
Forks
86
PR merge metrics
No merged PRs in 30d

Description

I am currently utilizing the microcode updates provided by Lenovo on the LVFS for my T16 Gen1.

However, recent CVE's (CVE-2023-39368, CVE-2023-38575, CVE-2023-28746) were ignored by Lenovo until 2024-05-09 with the release of CVE-2023-45733, even though the other three CVe's all had a higher CVSS scores than CVE-2023-45733.

Since I don't want to give up the option for firmware-updates via lvfs, microcode-updates are still getting installed on my device via lvfs, when I update the firmware of it.

1) Now my question is, if I switch to the Arch `intel-ucode` package for the microcode updates, will they conflict with the microcode updates published by lenovo on the lvfs or will everything be fine?

2) Will there be any problems, if I install every microcode-update, even though it doesn't affect my CPU?

I'd appreciate every answer I can get, so I can decide which way I want to go.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.