AMD is getting closer to the launch of its next-gen Ryzen Threadripper 7000 HEDT & Workstation CPU family featuring the latest Zen 4 cores.
AMD's Zen 2 chips have a security bug that's getting patched between now and 2024
25.07.2023 - 12:49 / pcgamer.com
A security vulnerability has been uncovered in AMD processors built with the Zen 2 architecture. Spotted by a Google researcher, the so-called 'Zenbleed' vulnerability opens the door to a potential attacker and threatens the possibility of exposing sensitive information. Don't worry, there is a fix, but us gamers will have to wait around a little longer than our server-side pals to get hold of it.
Zenbleed affects all Zen 2 processors, which includes Ryzen 3000/4000, Threadripper 3000, Ryzen 4000/5000/7020 mobile, and Epyc Rome generations.
The vulnerability, as described by AMD in a security bulletin, occurs «Under specific microarchitectural circumstances, a register in 'Zen 2' CPUs may not be written to 0 correctly. This may cause data from another process and/or thread to be stored in the YMM register, which may allow an attacker to potentially access sensitive information.»
The vulnerability is listed as «Medium» severity by AMD, however, its CVE (CVE-2023-20593) is not currently rated.
The vulnerabilities' discoverer, Tavis Ormandy, goes into greater detail on how the exploit works in their blog post. They believe the reason they discovered the bug, as opposed to AMD in post-silicon validation, is because they don't come from an electrical engineering background, oddly enough. They thank a technique called 'fuzzing' for sniffing the bug out, which is a way of testing out weird and unexpected data on a computer to expose unlikely architectural behaviours.
Ormandy notes that the vulnerability would work on your average machine but also virtual machines, sandboxes, containers, processors, «whatever!»
Clearly that's a big deal for large cloud providers, who take security extremely seriously.
Speaking to Tom's Hardware after they first noted the issue, AMD said it was not aware of any actual exploits outside of a research environment. It's certainly appears unlikely that this vulnerability would pose a threat to your average gamer, and it's more the cloud providers that will be worried about potential attacks than you or I, but this is the sort of vulnerability that is best patched up as soon as possible.
AMD was informed of the vulnerability on May 15, 2023, and since then has been working on mitigations.
Mitigations have already begun rolling out for Zenbleed, starting with the affected Epyc chips. We'll see Threadripper chips patched up around October into December, depending on the model. Laptop Ryzen processors should begin being fixed around November/December this year.
Finally, desktop Ryzen processors will get patched likely around December this year. That's a long time to wait for a patch, but at least this is the sort of mitigation that can be rolled out through microcode and AGESA
The website gametalkz.com is an aggregator of news from open sources. The source is indicated at the beginning and at the end of the announcement. You can send a complaint on the news if you find it unreliable.
Top Authors
Popular Topics
wowhead.com
11.08.2023 / 23:29
Mount Skills Not Available Bug Fixed in Patch 1.1.2 - Diablo 4
Tired of the «Not In Town» responses when you try to use Spur, even though you're well out of bounds of a city? So was Blizzard apparently — this issue is being fixed in Patch 1.1.2! Patch 1.1.2 Notes
pcgamesn.com
11.08.2023 / 12:09
The AMD Ryzen 7 7800X3D CPU is cheap again and comes with Starfield
The AMD Ryzen 7 7800X3D has received an unexpected price cut, alongside the rest of the 7000X3D series, including the 7900X3D and 7950X3D. These are the best gaming CPUs that AMD has to offer, and even come with a free copy of Starfield too.
pcgamer.com
10.08.2023 / 22:47
Baldur's Gate 3 transmog mod won't make you choose between armor and drip
It is just me or do big RPGs often neglect to include the same handful of features that players always want? First, we always need a way to change our character's appearance after we create them at the start of the game—neither The Witcher 3, Cyberpunk 2077, or Baldur's Gate 3 included that at launch.
wccftech.com
10.08.2023 / 10:23
AMD Ryzen 8000 “Strix Point” APU Sample Allegedly Spotted: 12 Core Hybrid Zen 5 Design In A 45W TDP
An alleged AMD Ryzen 8000 "Strix Point" APU sample has been unearthed by Performance Databases, featuring 12 Hybrid Zen 5 cores.
pcgamer.com
09.08.2023 / 15:13
Remnant 2 dev tells players moaning about Apocalypse difficulty that the mode's not called 'I get 3 orange slices and a medal for participation'
There are other games hogging the spotlight at the moment, but Remnant 2 looks like something of a dark horse that, among its devotees at least, is one of 2023's unique and most polished experiences. The game is a (deep breath) third person roguelike Soulslike shooter with a heavy focus on procedural generation, which can be played solo or co-op, and is one of those designed for multiple playthroughs, all of which in theory are wildly different. It is also a brutally difficult game and, on the highest difficulty (Apocalypse), has some players whining a little too much as they lick their wounds.
pcgamer.com
09.08.2023 / 11:49
AMD's upcoming Zen 5 CPUs predicted to be the biggest upgrade since the original Zen chips
AMD's next-gen Zen 5 CPU is shaping up very nicely. Well, it is according to the latest rumours which indicate the new CPU design will crank out roughly 30 percent more performance than AMD's existing Zen 4 architecture, as used in Ryzen 7000 Series chips like the Ryzen 9 7950X. That would make Zen 5 the biggest ever upgrade since the original Zen CPUs arrived back in 2017.
wccftech.com
09.08.2023 / 11:27
Apple Now Rumored To Have Secured TSMC’s Entire 3nm Supply For A Whole Year, Cutting Out The Competition
Apple has a slew of 3nm chipsets that will be found in various devices, starting with the A17 Bionic for the iPhone 15 Pro and iPhone 15 Pro Max, followed by the M3. However, to ensure that the competition does not catch up with the California-based giant for a whole year, a new rumor claims that the company has secured all of TSMC’s cutting-edge chip supply for a 12-month period.
pcgamesn.com
07.08.2023 / 19:53
Oops, Microsoft appears to leak unannounced AMD Ryzen CPU
It’s not uncommon for Microsoft to update which of the best gaming CPUs are compatible with Windows 11. It is, however, uncommon for the tech giant to accidentally unveil a previously unannounced AMD processor.
wccftech.com
07.08.2023 / 12:45
AMD Ryzen 7 7800X3D & 5800X3D 3D V-Cache CPUs Crush It In Sales At Mindfactory
The AMD 3D V-Cache chips including the Ryzen 7 7800X3D & 5800X3D continue to crush sales figures at German retailer, Mindfactory.
wccftech.com
05.08.2023 / 13:51
AMD Ryzen 8000 “Strix Point” APUs Feature 4 Zen 5, 8 Zen 5C CPU Cores, 16 RDNA 3.5 GPU Cores & 16 MB Cache
AMD's Ryzen 8000 "Strix Point" APUs might be a year away from launch but info regarding their hybrid Zen 5 CPU configurations has leaked out.
pcgamer.com
04.08.2023 / 16:09
Microsoft accused of 'negligent cybersecurity practices' that 'enabled Chinese espionage against the US government'
After Microsoft admitted its Azure platform had been breached by Chinese hacking group Storm-0558, chairman and CEO of network security giant Tenable, Amit Yoran, took to Microsoft-owned social platform LinkedIn to air his grievances against Microsoft's security practices.