AMD confirms security vulnerability in every Zen 1 to Zen 5 processor

Comments

• InnerScientist@lemmy.world ⁨1⁩ ⁨week⁩ ago

  EntrySign is a vulnerability that enables attackers with ring 0 or kernel-level access to bypass safeguards.

  So almost no security impact and no performance change?

  source

  • kata1yst@sh.itjust.works ⁨1⁩ ⁨week⁩ ago

    no performance change

    You must be new here.

    Joking. But seriously, on Linux you can bypass mitigations with basically no security impact if you’re not a cloud provider and get a significant performance boost.

    source

    • InnerScientist@lemmy.world ⁨1⁩ ⁨week⁩ ago

      weakness in signature verification algorithm that could allow an administrator privileged attacker to load arbitrary microcode patches

      I don’t think this will affect performance unless you depend on having to quickly update the CPU microcode multiple times a second.

      source

      • -> View More Comments
• asbestos@lemmy.world ⁨1⁩ ⁨week⁩ ago

  How do I update through linux?

  source

  • semperverus@lemmy.world ⁨1⁩ ⁨week⁩ ago

    You update through UEFI

    source
• samsi@lemmy.world ⁨1⁩ ⁨week⁩ ago

  Sounds terrible, but fortunately an update is available

  source