Security Bulletin: This Power System update is being released to address CVE-2018-8931

Summary POWER8/POWER9: In response to a security bypass vulnerability, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2018-8931. Vulnerability Details CVEID: CVE-2018-8931 DESCRIPTION: The AMD Ryzen, Ryzen Pro, and Ryzen Mobil...

CVE-2018-8931

CVE-2018-8931 concerns AMD Ryzen/Ryzen Pro/Ryzen Mobile chips with insufficient access control on the Secure Processor (RYZENFALL-1). The connected sources confirm this as a hardware/software security issue affecting multiple Ryzen family parts and firmware/BIOS vectors. The IBM Power/OPAL firmwa...