Stefan Mileschin

So it probably was a dodgy short-selling move

Last week AMD was hit by claims that its chips had a security flaw which would take years to fix, however it is starting to look like the security outfit which identified the flaws was singling out the chipmaker.

AMD has acknowledged the bugs and says that, in coming weeks, it will have new firmware available to resolve them. These firmware fixes will also mitigate the chipset bugs.

AMD’s CTO Mark Papermaster underlined the fact that root-level (administrator) OS access is needed to be able to useexploits against the vulnerabilities. That means they’re difficult to exploit – and anyone who managed to get unauthorised admin access to a machine could wreak all sorts of havoc on it without needing the bugs.

Papermaster clarified that fixes are in the pipeline, and that firmware patches would be released via BIOS updates to tackle the Masterkey, Ryzenfall and Fallout groups of vulnerabilities. A fourth group of flaws, known as Chimera, which affects systems using the ‘Promontory’ chipset, will receive attention via mitigating patches delivered through BIOS updates.

Israeli firm CTS identified four separate flaw families, naming them Masterkey (affecting Ryzen and Epyc processors), Ryzenfall (affecting Ryzen, Ryzen Pro, and Ryzen Mobile), Fallout (hitting only Epyc), and Chimera (applying to Ryzen and Ryzen Pro systems using the Promonotory chipset).

https://fudzilla.com/news/processors...-chimera-flaws