Description (CNA)
Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / AMD EPYC™ 9005 Series Processors | unaffected TurinPI 1.0.0.4 |
| AMD / AMD Ryzen™ AI 300 Series Processors | unaffected StrixKrackanPI-FP8_1.1.0.1b |
| AMD / AMD Ryzen™ 9000 Series Desktop Processors | unaffected ComboAM5PI 1.2.0.3c |
| AMD / AMD Ryzen™ 9000HX Series Processors | unaffected FireRangeFL1PI 1.0.0.0a |
| AMD / AMD Ryzen™ Al Max+ | unaffected StrixHaloPI-FP11_1.0.0.1 |
| AMD / AMD Ryzen™ Threadripper™ 9000 series | unaffected ShimadaPeakPI-SP6 1.0.0.1 |
| AMD / AMD EPYC™ Embedded 9000 Series Processors | unaffected Embturin PI 1.0.0.0 |
CWE
CWE-459
References
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3014.html
ADP enrichment
No English description supplied.
No references supplied.