AMD EPYC and Ryzen Processors Improper Resource Isolation Vulnerability

A vulnerability exists in AMD EPYC and Ryzen processors due to improper isolation of shared resources on the chip. This flaw could allow a malicious local attacker with high privileges to cause a partial loss of integrity. The issue affects several processor series, including AMD EPYC 7001, 7002, 7003, 8004, and 9004 series, as well as AMD Ryzen 3000, 4000, 5000, 7000, and embedded processors.

Impact

Exploitation of this vulnerability could lead to a partial loss of integrity, allowing unauthorized modification or corruption of data.

Remediation

Users can update to the recommended Platform Initialization (PI) or Secure Encrypted Virtualization (SEV) firmware versions. Specific update instructions can be found in the AMD Security Bulletin AMD-SB-4013.