Microsoft Win11 fixes a vulnerability in AMD processor Spectre Variant 2, affecting multiple processors
CTOnews.com, Nov. 10, Microsoft released security patches for Windows 11, Windows 10, Windows 8.1 and Windows 7 yesterday.
According to reports, the latest November patch fixes a Spectre Variant 2 vulnerability, including the AMD CPU vulnerability codenamed "CVE-2022-23824", which affects almost all AMD Auron, EPYC and Speedo desktops, laptops and server processors, but the Ryzen 7000 series chips are not affected.
In a report released earlier today, AMD described this new security vulnerability:
Announcement number: AMD-SB-1040
Potential impact: information disclosure
Severity: medium
AMD is aware of a potential vulnerability affecting AMD CPU, where the operating system relies on IBPB to refresh the return address predictor. This may allow CVE-2017-5715 (formerly known as Spectre Variant 2) to refresh the return address predictor in cases where the operating system relies on IBPB without using additional software mitigation.
Cve-2022-23824
IBPB cannot prevent the former branch target of IBPB from specifying the return branch prediction, which leads to potential information disclosure.
CTOnews.com has learned that the products affected include:
Desktop AMD Speed Dragon ™X4 processor
AMD Ruilong ™Threadripper ™PRO processor
Second generation AMD Ryzen ™Threadripper ™processor
The third generation AMD Ryzen ™Threadripper ™processor
Seventh generation AMD A series APU
AMD Ryzen ™2000 Series Desktop processor
AMD Ryzen ™3000 Series Desktop processor
AMD Ryzen ™4000 Series Desktop processors with Radeon ™Video Card
Mobile AMD Ruilong 2000 Series Mobile processor
AMD Athlon ™3000 Series Mobile processor with Radeon ™Video Card
AMD Ryzen ™3000 series mobile processors or second generation AMD Ryzen ™mobile processors with Radeon ™graphics card
AMD Ryzen ™4000 Series Mobile processor with Radeon ™Video Card
AMD Ryzen ™5000 Series Mobile processor with Radeon ™Video Card
Chromebook AMD Athlon ™Mobile processor with Radeon ™graphics card
The first generation of server AMD EPYC processor
The second generation AMD EPYC processor
The third generation AMD EPYC processor
