CVE-2018-8931

CVE-2018-8931 concerns AMD Ryzen/Ryzen Pro/Ryzen Mobile chips with insufficient access control on the Secure Processor (RYZENFALL-1). The connected sources confirm this as a hardware/software security issue affecting multiple Ryzen family parts and firmware/BIOS vectors. The IBM Power/OPAL firmwa...

CVE-2018-8932

The CVE-2018-8932 issue concerns AMD Ryzen/Ryzen Pro processors with insufficient access control in the Secure Processor (RYZENFALL-2/3/4). The available connected documents confirm a processor-embedded access-control weakness rather than a software-only flaw. Root cause: inadequate enforcement w...

CVE-2018-8932: Incorrect Permission Assignment for Critical Resource

The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4...

CVE-2018-8931: Incorrect Permission Assignment for Critical Resource

The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1...

AMD Acknowledges Vulnerabilities, Will Roll Out Patches In Coming Week

AMD on Tuesday acknowledged several vulnerabilities that had been previously reported in its Ryzen and EPYC chips, and said that it would roll out firmware patches for those flaws in the coming weeks. The response comes a week after Israel-based CTS-Labs said that it has discovered 13 critical...

AMD Investigating Reports of 13 Critical Vulnerabilities Found in Ryzen, EPYC Chips

Researchers on Tuesday said they found several critical security vulnerabilities in various AMD chips, allegedly opening them up to attackers who want to steal sensitive data and install malware on AMD servers, workstations and laptops. Israel-based CTS-Labs said that it has discovered 13 critica...

PT-2018-1088

Name of the Vulnerable Software and Affected Versions AMD EPYC Server processor affected versions not specified Description The issue is related to the implementation of the AMD Secure Processor technology in the AMD EPYC Server processor, specifically with the bootloader responsible for checking...

PT-2018-1087

Name of the Vulnerable Software and Affected Versions AMD Ryzen and Ryzen Pro processor chips affected versions not specified Description The vulnerability is related to insufficient access control for the Secure Processor in AMD Ryzen and Ryzen Pro processor chips. An attacker with access to the...

PT-2018-1086

Name of the Vulnerable Software and Affected Versions AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips affected versions not specified Description The issue is related to insufficient access control for the Secure Processor in AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips. This...