Description
Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell and a memory exfiltration vulnerability, potentially resulting in loss of confidentiality.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
AMD AMD EPYC™ 9004 Series Processors
Default version status: affected
GenoaPI 1.0.0.4unaffected
AMD AMD Ryzen™ 3000 Series Desktop Processors
Default version status: affected
ComboAM4V1 1.0.0.AunaffectedComboAM4V2 1.2.0.Aunaffected
AMD AMD Ryzen™ 5000 Series Desktop Processors
Default version status: affected
ComboAM4V2 1.2.0.Aunaffected
AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
Default version status: affected
ComboAM4V2 1.2.0.Aunaffected
AMD AMD Ryzen™ 7000 Series Desktop Processors
Default version status: affected
ComboAM5 1.0.0.6unaffected
AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
Default version status: affected
ComboAM4V2 1.2.0.AunaffectedComboAM4V1 1.0.0.Aunaffected
AMD AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
Default version status: affected
ComboAM4V2 1.2.0.Aunaffected
AMD AMD Ryzen™ Threadripper™ 3000 Series Processors
Default version status: affected
CastlePeakPI-SP3r3 1.0.0.9unaffected
AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
Default version status: affected
ChagallWSPI-sWRX8 1.0.0.6unaffectedCastlePeakWSPI-sWRX8 1.0.0.Bunaffected
AMD AMD Ryzen™ Threadripper™ PRO 5000WX Processors
Default version status: affected
ChagallWSPI-sWRX8 1.0.0.6unaffected
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
PicassoPI-FP5 1.0.0.Funaffected
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
PollockPI-FT5 1.0.0.5unaffected
AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics
Default version status: affected
PicassoPI-FP5 1.0.0.Funaffected
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
RenoirPI-FP6 1.0.0.Cunaffected
AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
CezannePI-FP6 1.0.0.Eunaffected
AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
CezannePI-FP6 1.0.0.Eunaffected
AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
Default version status: affected
MendocinoPI-FT6 1.0.0.4unaffected
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Default version status: affected
RembrandtPI-FP7 1.0.0.8unaffected
AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
Default version status: affected
RembrandtPI-FP7 1.0.0.8unaffected
AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
Default version status: affected
CezannePI-FP6 1.0.0.Eunaffected
AMD AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics
Default version status: affected
CezannePI-FP6 1.0.0.Eunaffected
AMD AMD Ryzen™ Embedded R1000 Series Processors
Default version status: affected
EmbeddedPI-FP5 1.2.0.Aunaffected
AMD AMD Ryzen™ Embedded R2000 Series Processors
Default version status: affected
EmbeddedR2KPI-FP5 1.0.0.2unaffected
AMD AMD Ryzen™ Embedded 5000 Series Processors
Default version status: affected
EmbAM4PI 1.0.0.3unaffected
AMD AMD Ryzen™ Embedded 7000 Series Processors
Default version status: affected
EmbeddedAM5PI 1.0.0.0unaffected
AMD AMD Ryzen™ Embedded V1000 Series Processors
Default version status: unaffected
variousaffected
AMD AMD Ryzen™ Embedded V2000 Series Processors
Default version status: affected
EmbeddedPI-FP6 1.0.0.8unaffected
AMD AMD Ryzen™ Embedded V3000 Series Processors
Default version status: affected
EmbeddedPI-FP7r2 1.0.0.5unaffected