There seems to be ucode= option proposed in xen unstable .. https://xenbits.xen.org/docs/unstable/misc/efi.html#ucodefilename But I didn't find where was implemented.