Bug 1774635

Summary: [RHEL 6] Do not update SKL-SP/W/X (CPUID 0x50654, 06-55-04) to revision 0x2000065 by default
Product: Red Hat Enterprise Linux 6 Reporter: Eugene Syromiatnikov <esyr>
Component: microcode_ctlAssignee: Eugene Syromiatnikov <esyr>
Status: CLOSED ERRATA QA Contact: Jeff Bastian <jbastian>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.10CC: efuller, jbastian, skozina, toneata
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: microcode_ctl-1.17-33.23.el6_10 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1774329 Environment:
Last Closed: 2019-12-10 11:41:34 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1774322, 1774329    
Bug Blocks:    

Description Eugene Syromiatnikov 2019-11-20 15:19:16 UTC 
There are reports of issues following update to revision 0x2000065 of 06-55-04 microcode:

https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/21

Since, per [1], this revision is not required for recently unembargoed Intel CPU vulnerabilities and errata, it may be wise to disable update to it by default, the same way it has been done for SNB-EP (06-2d-07) microcode revision 0x718.

[1] https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00270-microcode-update-guidance.pdf
Comment 6 Jeff Bastian 2019-12-06 23:34:18 UTC 
Verified with microcode_ctl-1.17-33.23.el6_10.  The default microcode version is 0x2000064, but it gets upgraded to 0x2000065 with the "force" file in place.


[root@lenovo-sr650-01 ~]# lscpu | grep -i -e family -e model -e stepping
CPU family:            6
Model:                 85
Model name:            Intel(R) Xeon(R) Silver 4116 CPU @ 2.10GHz
Stepping:              4

[root@lenovo-sr650-01 ~]# rpm -q microcode_ctl
microcode_ctl-1.17-33.23.el6_10.x86_64

[root@lenovo-sr650-01 ~]# cat /sys/devices/system/cpu/cpu0/microcode/version
0x2000064

[root@lenovo-sr650-01 ~]# install -D /dev/null /etc/microcode_ctl/ucode_with_caveats/force-intel-06-55-04

[root@lenovo-sr650-01 ~]# reboot
...

[root@lenovo-sr650-01 ~]# cat /sys/devices/system/cpu/cpu0/microcode/version
0x2000065
Comment 8 errata-xmlrpc 2019-12-10 11:41:34 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2019:4155