Skip to content

Instantly share code, notes, and snippets.

@ivan
Created July 24, 2023 18:28
Show Gist options
  • Save ivan/975fee7e0ce6f1fda09c3a05d8f60e4e to your computer and use it in GitHub Desktop.
Save ivan/975fee7e0ce6f1fda09c3a05d8f60e4e to your computer and use it in GitHub Desktop.
New AMD microcode hopefully fixing CVE-2023-20593 for nixpkgs
diff --git a/pkgs/os-specific/linux/firmware/linux-firmware/default.nix b/pkgs/os-specific/linux/firmware/linux-firmware/default.nix
index a2229a0a60ce..025fcf049dd0 100644
--- a/pkgs/os-specific/linux/firmware/linux-firmware/default.nix
+++ b/pkgs/os-specific/linux/firmware/linux-firmware/default.nix
@@ -1,6 +1,4 @@
-let
- source = import ./source.nix;
-in {
+{
stdenvNoCC,
fetchzip,
lib,
@@ -8,11 +6,11 @@ in {
stdenvNoCC.mkDerivation rec {
pname = "linux-firmware";
- version = source.version;
+ version = "2023-07-24";
src = fetchzip {
- url = "https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/snapshot/linux-firmware-${version}.tar.gz";
- hash = source.sourceHash;
+ url = "https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/snapshot/linux-firmware-59fbffa9ec8e4b0b31d2d13e715cf6580ad0e99c.tar.gz";
+ hash = "sha256-WyO/+fxQljfo6OXLC8/BomGmKtUQaJ1Lt9V5Fdv172g=";
};
installFlags = [ "DESTDIR=$(out)" ];
@@ -20,10 +18,6 @@ stdenvNoCC.mkDerivation rec {
# Firmware blobs do not need fixing and should not be modified
dontFixup = true;
- outputHashMode = "recursive";
- outputHashAlgo = "sha256";
- outputHash = source.outputHash;
-
meta = with lib; {
description = "Binary firmware collection packaged by kernel.org";
homepage = "https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git";
@ivan
Copy link
Author

ivan commented Jul 25, 2023

this did not work, microcode on the AMD Ryzen 7 3700X 8-Core Processor remains 0x08701021

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment