UBUNTU-CVE-2018-19962

An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones...

ALPINE-CVE-2018-19962

An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones...

The vulnerability of the AMD component in the Mac OS X operating system allows a hacker to trigger a service failure.

The vulnerability of the AMD component in the Mac OS X operating system is related to the operation of reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created application...

The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.

The vulnerability of AMD Secure Processor-based processors, such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server, stems from the absence of a mechanism for detecting damage to flash memory contents. Exploiting this vulnerability allows an attacker who has access to the targeted computer and...

The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.

The vulnerability of AMD Secure Processor-based processors, such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server, stems from the absence of a mechanism for detecting damage to flash memory contents. Exploiting this vulnerability allows an attacker who has access to the targeted computer and...

The vulnerability of the AMD Secure Processor implementation in EPYC Server processors allows for reading from the protected area of the processor.

The vulnerability of the AMD Secure Processor implementation in EPYC Server processors lies in the deficiencies in the implementation of the loader responsible for verifying the functionality of the hardware, as well as for launching the AMD Secure Processor module. Exploiting this vulnerability...

The vulnerability in the implementation of AMD Secure Processor technology in Ryzen and Ryzen Pro processors allows for the disabling of System Management Mode protection.

The vulnerability of AMD Secure Processor-based Ryzen and Ryzen Pro processors lies in the implementation flaws of security functions. Exploiting this vulnerability allows an attacker with access to the targeted computer and administrative privileges to disable the System Management Mode SMM...

Unbootable state for AMD devices in Windows 7 SP1 and Windows Server 2008 R2 SP1

Unbootable state for AMD devices in Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This update resolves the following issue: Microsoft has received reports of some customers on a small subset of older AMD processors getting into an unbootable state after you install January 3, 2018—KB405689...

Multiple AMD product design vulnerabilities

AMD EPYC Server, etc. are central processing unit CPU products of AMD, USA. A security vulnerability exists in a number of AMD products that stems from a program failing to adequately enforce the Hardware Validated Boot.An attacker could use this vulnerability to install malicious software that...

AMD Ryzen and Ryzen Pro Promontory chipset code execution vulnerability (CNVD-2018-07881)

AMD Ryzen and Ryzen Pro are both central processing unit CPU products from AMD in the U.S. Promontory chipset is one of these chipsets. The Promontory chipset used in AMD Ryzen and Ryzen Pro has a security vulnerability that stems from the presence of a backdoor in the ASIC. An attacker could...

Elevation of Privilege Vulnerability in Multiple AMD Products

AMD EPYC Server, etc. are central processing unit CPU products of AMD, USA. A security vulnerability exists in several AMD products. An attacker can exploit the vulnerability to elevate privileges...

AMD Ryzen and Ryzen Pro Promontory chipset code execution vulnerability

AMD Ryzen and Ryzen Pro are both central processing unit CPU products from AMD in the U.S. Promontory chipset is one of these chipsets. The Promontory chipset used in AMD Ryzen and Ryzen Pro has a security vulnerability that stems from a backdoor in the firmware. An attacker could exploit the...

CVE-2018-8930

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3...

CVE-2018-8934

The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in firmware, aka CHIMERA-FW...

hw: cpu: speculative execution permission faults handling

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly used performance optimization. There are three primary variants of the issue which differ in the way the speculative execution can be exploited. Variant...

January 31, 2018—KB4058258 (OS Build 16299.214)

None None...

Unbootable state for AMD devices in Windows 8.1 and Windows Server 2012 R2

Unbootable state for AMD devices in Windows 8.1 and Windows Server 2012 R2 Summary This update resolves the following issue: Microsoft has received reports of some customers on a small subset of older AMD processors getting into an unbootable state after you install January 3, 2018—KB4056898...

hw: cpu: speculative execution permission faults handling

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly used performance optimization. There are three primary variants of the issue which differ in the way the speculative execution can be exploited. Variant...

ALPINE-CVE-2016-9377

Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service guest crash by leveraging IDT entry miscalculation...

Apple OS X El Capitan AMD Memory Information Disclosure Vulnerability

Apple OS X El Capitan is an operating system on Apple devices. A security vulnerability in AMD in Apple OS X El Capitan allows attackers to exploit the vulnerability to obtain kernel memory layout information...