Description
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
AMD AMD EPYC™ 7001 Series
Default version status: affected
NaplesPI 1.0.0.Punaffected
AMD AMD EPYC™ 7002 Series
Default version status: affected
RomePI 1.0.0.Lunaffected
AMD AMD EPYC™ 7003 Series
Default version status: affected
MilanPI 1.0.0.Funaffected
AMD AMD EPYC™ 9004 Series
Default version status: affected
Genoa 1.0.0.Eunaffected
AMD AMD EPYC™ 4004 Series
Default version status: affected
ComboAM5PI1.0.0.aunaffectedComboAM5PI1.1.0.3cunaffectedComboAM5PI1.2.0.3unaffected
AMD AMD EPYC™ 9005 Series
Default version status: affected
TurinPI 1.0.0.4unaffected
AMD AMD Instinct™ MI300A
Default version status: affected
MI300PI_SR5 1.0.0.8unaffected
AMD AMD Ryzen™ 5000 Series Desktop Processors
Default version status: affected
ComboAM4v2PI 1.2.0.Eunaffected
AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
Default version status: affected
ComboAM4v2PI 1.2.0.Eunaffected
AMD AMD Ryzen™ 3000 Series Desktop Processors
Default version status: affected
ComboAM4PI 1.0.0.DunaffectedComboAM4v2PI 1.2.0.Eunaffected
AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
Default version status: affected
ComboAM4PI 1.0.0.DunaffectedComboAM4v2PI 1.2.0.Eunaffected
AMD AMD Ryzen™ 7000 Series Desktop Processors
Default version status: affected
ComboAM5PI 1.0.0.aunaffectedComboAM5PI 1.1.0.3cunaffectedComboAM5PI 1.2.0.3unaffected
AMD AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics
Default version status: affected
ComboAM4v2PI 1.2.0.Eunaffected
AMD AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics
Default version status: affected
ComboAM5PI 1.1.0.3cunaffectedComboAM5PI 1.2.0.3unaffected
AMD AMD Ryzen™ 9000 Series Desktop Processors
Default version status: affected
ComboAM5PI 1.2.0.3cunaffected
AMD AMD Ryzen™ Threadripper™ 3000 Series Processors
Default version status: affected
CastlePeakPI-SP3r3 1.0.0.Eunaffected
AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors
Default version status: affected
StormPeakPI-SP6 1.0.0.1kunaffectedStormPeakPI-SP6 1.1.0.0iunaffected
AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
Default version status: affected
ChagallWSPI-sWRX8 1.0.0.BunaffectedCastlePeakWSPI-sWRX8 1.0.0.gunaffected
AMD AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors
Default version status: affected
ChagallWSPI-sWRX8 1.0.0.Bunaffected
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
PicassoPI-FP5 1.0.1.2bunaffected
AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics
Default version status: affected
PicassoPI-FP5 1.0.1.2bunaffected
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
RenoirPI-FP6 1.0.0.Ebunaffected
AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
Default version status: affected
CezannePI-FP6 1.0.1.1bunaffected
AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
Default version status: affected
MendocinoPI-FT6 1.0.0.7bunaffected
AMD AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics
Default version status: affected
RembrandtPI-FP7 1.0.0.Bbunaffected
AMD AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics
Default version status: affected
RembrandtPI-FP7 1.0.0.Bbunaffected
AMD AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics
Default version status: affected
CezannePI-FP6 1.0.1.1bunaffected
AMD AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics
Default version status: affected
PhoenixPI-FP8-FP7 1.2.0.0unaffected
AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
PhoenixPI-FP8-FP7 1.2.0.0unaffected
AMD AMD Ryzen™ 7045 Series Mobile Processors
Default version status: affected
DragonRangeFL1 1.0.0.3gunaffected
AMD AMD Ryzen™ AI 300 Series
Default version status: affected
StrixKrakenPI-FP8_1.1.0.0bunaffected
AMD AMD Ryzen™ AI Max +
Default version status: affected
StrixHaloPI-FP11_1.0.0.1unaffected
AMD AMD Ryzen™ 9000HX Series Mobile Processors
Default version status: affected
FireRangeFL1PI 1.0.0.0aunaffected
AMD AMD EPYC™ Embedded 3000
Default version status: affected
SnowyOwl PI 1.1.0.Eunaffected
AMD AMD EPYC™ Embedded 7002
Default version status: affected
EmbRomePI-SP3 1.0.0.Dunaffected
AMD AMD EPYC™ Embedded 7003
Default version status: affected
EmbMilan PI-SP3 1.0.0.Aunaffected
AMD AMD EPYC™ Embedded 8004
Default version status: affected
EmbGenoaPI-SP5 1.0.0.9unaffected
AMD AMD EPYC™ Embedded 9004
Default version status: affected
EmbGenoaPI-SP5 1.0.0.9unaffected
AMD AMD EPYC™ Embedded 97X4
Default version status: affected
EmbGenoaPI-SP5 1.0.0.9unaffected
AMD AMD Ryzen™ Embedded R1000
Default version status: affected
EmbeddedPI-FP5 1.2.0.Funaffected
AMD AMD Ryzen™ Embedded R2000
Default version status: affected
EmbeddedR2KPI 1.0.0.5unaffected
AMD AMD Ryzen™ Embedded 5000
Default version status: affected
EmbAM4PI 1.0.0.7unaffected
AMD AMD Ryzen™ Embedded 7000
Default version status: affected
EmbeddedAM5PI 1.0.0.3unaffected
AMD AMD Ryzen™ Embedded V1000
Default version status: affected
EmbeddedPI-FP5 1.2.0.Funaffected
AMD AMD Ryzen™Embedded V2000
Default version status: affected
EmbeddedPI-FP6 1.0.0.Bunaffected
AMD AMD Ryzen™Embedded V3000
Default version status: affected
EmbeddedPI-FP7R2 1.0.0.Cunaffected