AMD: Patch your Ryzen and EPYC systems now as the company has just released a list of 31 new CPU Vulnerabilities

In a January update, AMD quietly disclosed 31 new CPU vulnerabilities spanning its Ryzen consumer chips and EPYC data centre processors. The vulnerability update also includes a list of AGESA versions, as well as mitigations for affected processors. AMD disclosed the flaws in a coordinated disclosure with several researchers, including teams from Google, Apple, and Oracle, giving the company time to develop mitigations before the public listings.

The interesting thing here is that AMD did not announce the vulnerabilities through a press release or other means, instead simply posting the lists. The list includes AGESA revisions that AMD has distributed to its OEMs in order to patch the vulnerabilities (AGESA code is used to build BIOS/UEFI code). The availability of new BIOS patches with the new AGESA code, on the other hand, will vary by vendor.

So its better if you with your motherboard or system vendor to see if new BIOS revisions with the correct AGESA code have been posted.

AMD says it typically releases vulnerability disclosures twice a year, in May and November, but chose to release some in January due to the relatively large number of new vulnerabilities and the timing of the mitigations. It is unclear whether there will be performance penalties, as with other mitigations such as Spectre and Meltdown.

H33WaYXNMC3NJjLJRqbKXh 1200 80 AMD: Patch your Ryzen and EPYC systems now as the company has just released a list of 31 new CPU Vulnerabilities
credit: AMD

Three new variants of the vulnerabilities affect the consumer-oriented Ryzen desktop PC, HEDT, Pro, and Mobile processors. One vulnerability is classified as high severity, while the other two are classified as medium or low severity.

These flaws can be exploited via BIOS hacks or an attack on the AMD Secure Processor (ASP) bootloader.

The flaws affect the Ryzen 2000-series Pinnacle Ridge desktop chips, as well as the 2000- and 5000-series APU product lines with integrated graphics (Raven Ridge, Cezanne). Furthermore, AMD’s Threadripper 2000- and 3000-series HEDT and Pro processors, as well as numerous Ryzen 2000-, 3000-, 5000-, 6000-, and Athlon 3000-series mobile processors, are affected.

AMD has also disclosed 28 EPYC processor vulnerabilities, four of which are of high severity. Three of the high-severity variants allow arbitrary code execution via various attack vectors, while another allows writing data to specific regions, which can result in data integrity and availability loss. Researchers also discovered 15 other medium-severity vulnerabilities and nine low-severity vulnerabilities.

Also Read:

Source

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.

More like this

AMD Ryzen 9 8940HX: Next-Gen Laptop Powerhouse Unveiled

AMD Ryzen 9 8940HX: Next-Gen Laptop Powerhouse Unveiled

Discover the AMD Ryzen 9 8940HX: a 16-core beast with 32 threads, promising to revolutionize high-performance laptops...
AMD AI Event: Advancing AI 2025 Set to Transform the Industry with Next-Gen Technology

AMD AI Event: Advancing AI 2025 Set to Transform...

AMD AI Event: AMD has just announced a major industry event that promises to reshape the artificial...
AMD and Google Cloud Launch New VMs Powered by 5th Gen EPYC Processors

AMD and Google Cloud Launch New VMs Powered by...

In a groundbreaking collaboration that’s sending ripples through the tech world, AMD and Google Cloud have unveiled...
Intel

Intel Wins Nintendo Switch 3 GPU Battle, AMD Faces...

Intel clinches a Nintendo Switch 3 GPU deal with a 18A process, while AMD grapples with a...
AMD

AMD Surges Ahead in 2025: Gains 16.6% CPU Market...

In a dramatic shift in the CPU landscape, AMD has pulled off one of its biggest wins...

LATEST NEWS

IPL 2025: KL Rahul’s Blazing 93 Silences Chinnaswamy as DC Crush RCB

Royal Challengers Bengaluru (RCB) got off to a flying start, but for the next 16 overs or so, things quickly unraveled. Just when it...

Tuk Tuk: A Supernatural Comedy That Defies Expectations

In the vibrant landscape of Indian cinema, few films dare to challenge conventional storytelling quite like Tuk Tuk. This Telugu supernatural comedy emerges as...

Thunderbolts: The Void Rises in Marvel’s Most Dangerous Team-Up

In the ever-evolving Marvel Cinematic Universe, a new breed of heroes emerges from the shadows. The Thunderbolts represent a radical departure from traditional superhero...

Hyper Knife: The Psychological Chess Match of Survival

In the intricate world of medical psychological thrillers, Hyper Knife emerges as a masterpiece of narrative complexity. The series, starring Sul Kyung-gu and Park...

Featured