AMD confirms flaws found by CTS-labs; promises patches with fixes

2 minute read

Home » News » AMD confirms flaws found by CTS-labs; promises patches with fixes

AMD has finally confirmed the flaws announced by CTS-Labs, but it also downplayed their severity. The company promised to release fixes via firmware patches shortly.

CTS-Labs is a small security company that became famous after going public with 13 claimed security flaws that affect AMD’s Zen-based processor families. This happened after CTS-Labs alerted the company privately and when a substantial short on AMD’s stock got issued.

Here are the claimed vulnerabilities, according to AMD

The flaws aka Ryzenfall, Masterkey, Fallout, and Chimera sparked controversy regarding their severity and validity. Everyone was curious what AMD plans to do about this. AMD issued the first statement in which it confirms the flaws but says they have a less severe impact than previously presented by the security firm. AMD also mentioned the Spectre vulnerability that is related to design flaws in the Zen microarchitecture unlike the ones mentioned above.

AMD’s Mark Papermaster stated that the flaws found by CTS-Labs are associated with the firmware managing the embedded security control processor in some AMD products and the chipset used in some socket AM4 and socket TR4 desktop platforms that support AMD CPUs.

AMD said that all these issues require administrative access to the system that grants the user unrestricted access and the right to delete, create or modify any of the system’s data. Attackers would have increased power of exploits. AMD also said that modern Oss have adequate security controls that would prevent this from happening.

AMD confirms that it will release fixes

The company promised that it would release fixes for all these issues as soon as possible via firmware updates. These will have to be integrated into updates coming from each motherboard manufacturer and for each model. In other words, the fixes will probably need a long time and the affected products will receive the patches not as soon as expected. These will not affect the performance or functionality of the affected systems. AMD concluded saying that these flaws are definitely less easy to exploit compared to Spectre and Meltdown ones.

RELATED STORIES TO CHECK OUT:

Discussions

Next up

Fix power bi datasource.errors with these steps

Tashreef Shareef avatar. By: Tashreef Shareef
3 minute read

Some times while trying to access data from excel, sqlserver, and oracle to general visuals you may encounter Power bi datasource.errors. These errors can have […]

Continue Reading

Windows has encountered a problem communicating with a device

Vladimir Popescu avatar. By: Vladimir Popescu
2 minute read

Many users have reported seeing the error message Windows has encountered a problem communicating with a device. This issue can stop you from being able […]

Continue Reading

Here’s how to disable load in Power BI [EASY GUIDE]

Alexandru Voiculescu By: Alexandru Voiculescu
2 minute read

There are instances in which Power BI uses a lot of memory, especially when it comes to old PCs. So, to minimize memory and also […]

Continue Reading