[Bug 2121119] Re: amdtee binary file not found

[Launchpad Bug Tracker]

This bug was fixed in the package amd64-microcode -
3.20250708.0ubuntu0.25.04.2

---------------
amd64-microcode (3.20250708.0ubuntu0.25.04.2) plucky-security; urgency=medium

  * SECURITY UPDATE: Update package data from linux-firmware 20250708
    - Updated microcodes:
      Family=0x19 Model=0x08 Stepping=0x02: Patch=0x0a00820d Length=5568 bytes
      Family=0x19 Model=0x18 Stepping=0x01: Patch=0x0a108109 Length=5568 bytes
      Family=0x19 Model=0x21 Stepping=0x00: Patch=0x0a20102e Length=5568 bytes
      Family=0x19 Model=0x21 Stepping=0x02: Patch=0x0a201211 Length=5568 bytes
      Family=0x19 Model=0x44 Stepping=0x01: Patch=0x0a404108 Length=5568 bytes
      Family=0x19 Model=0x50 Stepping=0x00: Patch=0x0a500012 Length=5568 bytes
      Family=0x19 Model=0x61 Stepping=0x02: Patch=0x0a60120a Length=5568 bytes
      Family=0x19 Model=0x74 Stepping=0x01: Patch=0x0a704108 Length=5568 bytes
      Family=0x19 Model=0x75 Stepping=0x02: Patch=0x0a705208 Length=5568 bytes
      Family=0x19 Model=0x78 Stepping=0x00: Patch=0x0a708008 Length=5568 bytes
      Family=0x19 Model=0x7c Stepping=0x00: Patch=0x0a70c008 Length=5568 bytes
    - CVE-2024-36350 (AMD-SB-7029)
      A transient execution vulnerability in some AMD processors may allow
      an attacker to infer data from previous stores, potentially resulting
      in the leakage of privileged information.
    - CVE-2024-36357 (AMD-SB-7029)
      A transient execution vulnerability in some AMD processors may allow
      an attacker to infer data in the L1D cache, potentially resulting in
      the leakage of sensitive information across privileged boundaries.
  * Remaining changes:
    - initramfs-tools hook (debian/initramfs.hook):
      + Default to 'early' instead of 'auto' when building with
        MODULES=most
      + Do not override preset defaults from auto-exported conf
        snippets loaded by initramfs-tools.
  * Also Update AMD PMF TA Firmware to v3.1 to match the upstream git tag. (LP: #2121119)

 -- Rodrigo Figueiredo Zaiden <rodrigo.zaiden at canonical.com>  Wed, 16
Jul 2025 17:59:47 -0300

** Changed in: amd64-microcode (Ubuntu Plucky)
       Status: Confirmed => Fix Released

** CVE added: https://cve.org/CVERecord?id=CVE-2024-36350

** CVE added: https://cve.org/CVERecord?id=CVE-2024-36357

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to amd64-microcode in Ubuntu.
https://bugs.launchpad.net/bugs/2121119

Title:
  amdtee binary file not found

Status in HWE Next:
  New
Status in amd64-microcode package in Ubuntu:
  In Progress
Status in linux-firmware package in Ubuntu:
  Invalid
Status in amd64-microcode source package in Noble:
  New
Status in linux-firmware source package in Noble:
  In Progress
Status in amd64-microcode source package in Plucky:
  Fix Released
Status in amd64-microcode source package in Resolute:
  In Progress
Status in linux-firmware source package in Resolute:
  Invalid

Bug description:
  [Impact]
  amd-pmf driver requires a new firmware which does not exists in noble yet.

  Aug 18 07:40:28 localhost kernel: tee tee0: Direct firmware load for /amdtee/f29bb3d9-bd66-5441-afb88acc2b2b60d6.bin failed with error -2
  Aug 18 07:40:28 localhost kernel: failed to load firmware /amdtee/f29bb3d9-bd66-5441-afb88acc2b2b60d6.bin
  Aug 18 07:40:28 localhost kernel: failed to copy TA binary
  Aug 18 07:40:28 localhost kernel: Failed to open TEE session err:0x0, rc:-12
  Aug 18 07:40:28 localhost kernel: amd-pmf AMDI0107:00: Failed to open TA session (-12)
  Aug 18 07:40:28 localhost kernel: amd-pmf AMDI0107:00: registered PMF device successfully

  [Fix]
  The required firmware is from this commit
  86d528c2 amd_pmf: Update AMD PMF TA Firmware to v3.1

  [Test]
  Verify the dmesg after booted up, there should be no amdtee firmware not found errors

  [Where problems could occur]
  The device works after this SRU, so no regression.

To manage notifications about this bug go to:
https://bugs.launchpad.net/hwe-next/+bug/2121119/+subscriptions