AMD EPYC and Ryzen Embedded Processors CPU Microcode Loading Vulnerability Allowing Integrity Loss in Instruction Execution

A vulnerability exists in the microcode patch loading process of AMD EPYC and Ryzen Embedded processors. This issue, caused by improper cleanup after loading CPU microcode patches, could enable an attacker with local administrator privileges to inject malicious microcode. The exploitation of this vulnerability may lead to a loss of integrity in x86 instruction execution.

Impact

Exploitation of this vulnerability could result in a compromised integrity of x86 instruction execution, allowing for potentially malicious actions to be carried out at the instruction level.

Remediation

Users are advised to update to the latest Platform Initialization (PI) firmware version. Specific update instructions can be obtained from the original equipment manufacturer (OEM).