Description (CNA)
Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / AMD EPYC™ Series 9004 Processors | unaffected GenoaPI_1.0.0.E |
| AMD / AMD EPYC™Series 4004 Processors | unaffected ComboAM5PI_1.0.0.a/ ComboAM5PI_1.1.0.3c/ ComboAM5PI_1.2.0.3 |
| AMD / AMD EPYC™ 8004 Series Processors | unaffected GenoaPI_1.0.0.E |
| AMD / AMD Instinct™ MI300A Series Processors | unaffected MI300PI 1.0.0.7 |
| AMD / AMD Ryzen™ Z1 Series Processors | unaffected ComboAM5PI_1.2.0.3; unaffected ComboAM5PI_1.1.0.3c; unaffected ComboAM5PI_1.0.0.a |
| AMD / AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics | unaffected PhoenixPI-FP8-FP7_1.2.0.0 |
| AMD / AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics | unaffected DragonRangeFL1_1.0.0.3g |
| AMD / AMD Ryzen™ 9000 Series Desktop Processors | unaffected ComboAM5PI_1.2.0.3 |
| AMD / AMD Ryzen™ 7000 Series Desktop Processors | unaffected ComboAM5PI_1.0.0.a; unaffected ComboAM5PI_1.1.0.3c; unaffected ComboAM5PI_1.2.0.3 |
| AMD / AMD Ryzen™ 8000 Series Desktop Processors | unaffected ComboAM5PI_1.1.0.3c; unaffected ComboAM5PI_1.2.0.3 |
| AMD / AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael") | unaffected ComboAM5PI_1.3.0.0 |
| AMD / AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix") | unaffected ComboAM5PI_1.3.0.0 |
| AMD / AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") | unaffected EmbGenoaPI-SP5 1.0.0.D |
| AMD / AMD EPYC™ Embedded 8004 Series Processors | unaffected EmbGenoaPI-SP5 1.0.0.D |
| AMD / AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo") | unaffected EmbGenoaPI-SP5 1.0.0.D |
| AMD / AMD Ryzen™ Embedded 8000 Series Processors | unaffected EmbeddedPhoenixPI-FP7r2_1.0.0.3 |
| AMD / AMD Ryzen™ Embedded 7000 Series Processors | unaffected EmbeddedAM5PI 1.0.0.5 |
CWE
CWE-693
References
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3030.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html
ADP enrichment
No English description supplied.
No references supplied.