Microcode is updated by the OS or BIOS/EFI.

https://wiki.debian.org/Microcode#CPU_Microcode