A total of 31 vulnerabilities have been found in various CPU,AMD models such as Ryzen and EPYC.
Thanks to CTOnews.com netizens RealONE and OC_Formula for the clue delivery! CTOnews.com January 15 news, AMD said in an update in January this year, in its Ryzen (Ruilong), Xiaolong (EPYC) processors found a total of 31 vulnerabilities.
AMD officials have put in place a number of mitigation measures to fix these vulnerabilities, and jointly issued security reports with Apple, Google and Oracle. The company also announced several AGESA derivative versions listed in the update (the AGESA code was discovered while building the system's BIOS and UEFI code).
Due to the nature of the vulnerability, changes to AGESA have been delivered to OEM vendors, and AMD requires each vendor to release the relevant patches as soon as possible. Consumers had better visit the supplier's official website to see if there are new updates waiting to be downloaded, rather than waiting for the company to push.
Of the 31 vulnerabilities found by AMD this time, 1 is marked as "high severity". All vulnerabilities are exploited through BIOS and ASP boot loaders (also known as AMD security processor boot loaders).
CTOnews.com comes with a list of affected AMD processors:
Ryzen 2000 (Pinnacle Ridge) series processors
Ryzen 2000 APUs
Ryzen 5000 APUs
AMD Threadripper 2000 HEDT and Pro server processor family
AMD Threadripper 3000 HEDT and Pro server processor family
Ryzen 2000 Series Mobile processor
Ryzen 3000 Series Mobile processor
Ryzen 5000 Series Mobile processor
Ryzen 6000 Series Mobile processor
Athlon 3000 Series Mobile processor