Description
Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
PicassoPI-FP5 1.0.0.Eunaffected
AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
Default version status: affected
ChagallWSPI-sWRX8 1.0.0.5unaffectedCastlePeakWSPI-sWRX8 1.0.0.Aunaffected
AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
Default version status: affected
ComboAM4v2 PI 1.2.0.8unaffected
AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
Default version status: affected
ChagallWSPI-sWRX8 1.0.0.5unaffected
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
RenoirPI-FP6 1.0.0.Aunaffected
AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
PicassoPI-FP5 1.0.0.Eunaffected
AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
CezannePI-FP6 1.0.0.Cunaffected
AMD AMD Ryzen™ 3000 Series Desktop Processors
Default version status: affected
ComboAM4V1 1.0.0.AunaffectedComboAM4V2 1.2.0.9unaffected
AMD AMD Ryzen™ 2000 Mobile Processors
Default version status: affected
ComboAM4v2 PI 1.2.0.8unaffectedComboAM4PI 1.0.0.9unaffected
AMD AMD Ryzen™ 4000 Series Desktop Processors
Default version status: affected
ComboAM4v2 PI 1.2.0.8unaffected
AMD AMD Ryzen™ 5000 Series Desktop Processors
Default version status: affected
ComboAM4v2 PI 1.2.0.8unaffected
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Default version status: affected
RembrandtPI-FP7_1.0.0.5unaffected
AMD AMD Ryzen™ Embedded R1000 Series Processors
Default version status: affected
EmbeddedPI-FP5_1.2.0.Aunaffected
AMD AMD Ryzen™ Embedded R2000 Series Processors
Default version status: affected
EmbeddedR2KPI-FP5 1.0.0.2unaffected
AMD AMD Ryzen™ Embedded 5000 Series Processors
Default version status: affected
EmbAM4PI 1.0.0.2unaffected
AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")
Default version status: affected
EmbeddedPI-FP5_1.2.0.Aunaffected
AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")
Default version status: affected
EmbeddedPI-FP5_1.2.0.Aunaffected
AMD AMD Ryzen™ Embedded V2000 Series Processor
Default version status: affected
EmbeddedPI-FP6_1.0.0.8unaffected
AMD AMD Ryzen™ Embedded V3000 Series Processors
Default version status: affected
EmbeddedPI-FP7r2_1002unaffected
AMD AMD Radeon™ RX 5000 Series Graphics Products
Default version status: affected
AMD Software: Adrenalin Edition 22.5.2 (22.10.17.01)unaffected
AMD AMD Radeon™ PRO W5000 Series Graphics Products
Default version status: affected
AMD Software: PRO Edition 22.Q2 (22.10.20)unaffected
AMD AMD Radeon™ RX 6000 Series Graphics Products
Default version status: affected
AMD Software: Adrenalin Edition 22.5.2 (22.10.17.01)unaffected
AMD AMD Radeon™ PRO W6000 Series Graphics Products
Default version status: affected
AMD Software: PRO Edition 22.Q2 (22.10.20)unaffected
AMD MI-25 / 50
Default version status: affected
No fix plannedunaffected
AMD MI-100
Default version status: affected
ROCm 6.4.2unaffected
AMD AMD Instinct™ MI250
Default version status: affected
ROCm 7.0unaffected
AMD AMD Instinct™ MI210
Default version status: affected
ROCm 7.0unaffected
References
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5002.html ↗
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4004.html ↗
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-1029.html ↗
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html ↗