cpu-microcode-intel: no matching update found on Intel Core i3-1215U

[sopex]

Hi @Franco,

I may have found a microcode packaging/split-file issue on OPNsense.

System:

Protectli VP6630
Intel Core i3-1215U, Alder Lake R0
coreboot 0.9.0

Is it possible that the split microcode file 06-9a-04.80 is missing from the package, so the Intel microcode plugin cannot update this CPU and keeps the firmware-provided 0x432?

Thanks!
FB

This got fixed here, it will become part of opnsense soon enough https://github.com/FreeBSD/freebsd-ports/commit/d4b93e88468975e64d6321cfc463f5fc19f46d35

[BrandyWine]

The fixed package looks good, it now has 06-9a-04.80

Just not sure the .80 is the fix for the issue in post #1.

Manually download/install the pkg, then lets see what happens.

[BrandyWine]

I interesting.
For v14
https://ports.freebsd.org/cgi/ports.cgi?query=cpu&stype=all&sektion=all
shows only the 20260512_1 as an Intel ucode package

but
https://www.freshports.org/sysutils/cpu-microcode-intel/
shows _1 as the 32bit package
also shows one for amd64 (64bit x86)

but
also shows the _1 for v16 64bit

So a tad confused. Is the _1 pkg the only one?

[fastboot]

Quick update:

The FreeBSD fix has now been merged:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295351

and OPNsense has already shipped an updated cpu-microcode-intel package (20260512).

However, after upgrading and rebooting, my system still reports:

CPU microcode: no matching update found

The system is a Protectli VP6630 with an Intel i3-1215U running Dasharo/coreboot 0.9.0.

So the original FreeBSD issue was real and has been fixed upstream, but my specific Alder Lake R0 system still does not appear to receive a microcode update. I have added the new findings to the FreeBSD bug report for further investigation.

Will be interesting to see what the root cause turns out to be.

[BrandyWine]

We need more info.
Is the actual new pkg installed? Does the loader conf say to install the bin? What size is the ucode bin file? Is the .80 file there?

[fastboot]

We need more info.
Is the actual new pkg installed? Does the loader conf say to install the bin? What size is the ucode bin file? Is the .80 file there?

The information is already available both in this thread and in the FreeBSD bug report.

For completeness:

- cpu-microcode-intel-20260512 is installed
- cpu_microcode_load="YES" and cpu_microcode_name="/boot/firmware/intel-ucode.bin" are configured
- intel-ucode.bin exists and is 16 MB
- CPU is an i3-1215U (CPUID 06-9a-04)
- current microcode remains 0x432
- boot still reports "CPU microcode: no matching update found"

However, Joseph Mingrone pointed out that the fix discussed in PR 295351 was only included starting with cpu-microcode-intel-20260512_1.

My system is currently still on 20260512, so I haven't  actually tested the fixed package yet.

Once OPNsense ships the _1 revision, I'll test again and report back.

[meyergru]

In that case, the patch is obviously not yet contained in the package. I know for a fact that the current version for that CPU is 0x43a under Linux:

Code Select Expand

# cat /proc/cpuinfo
...
processor       : 7
vendor_id       : GenuineIntel
cpu family      : 6
model           : 154
model name      : 12th Gen Intel(R) Core(TM) i3-1215U
stepping        : 4
microcode       : 0x43a


# dmesg | fgrep microcode
[    0.964793] microcode: Current revision: 0x0000043a
[    0.964796] microcode: Updated early from: 0x00000434

So, even if FreeBSD still has an older variant, it sure is not 0x432, which must be the initial one or one from the Protectli BIOS.