AMD Discloses 31 Vulnerabilities Affecting Ryzen and EPYC CPUs In January Update

In a recent January ‘silent’ update, AMD revealed 31 vulnerabilities on both EPYC and Ryzen processors. The red camp has created numerous mitigations before disclosing its report on the exposed processors in collaboration with the top three companies, including Google, Apple, and Oracle.

Along with the report, AMD has also listed several AGESA changes which have already been sent to OEMs because of the severe nature of the issue. However, patching or releasing a new bios update will depend solely on the vendors. But for anyone concerned, we recommend frequently visiting the vendor’s official website for new BIOS updates.

AMD processors list that is vulnerable to this new attack includes Ryzen 2000 (Pinnacle Ridge) series processors, Ryzen 2000 APUs, Ryzen 5000 APUs, AMD Threadripper 2000 HEDT and Pro server processor series, AMD Threadripper 3000 HEDT and Pro server processor series, Ryzen 2000 series mobile processors, Ryzen 3000 series mobile processors, Ryzen 5000 series mobile processors, Ryzen 6000 series mobile processors and Athlon 3000 series mobile processors.

AMD has also shared that the company only discloses vulnerabilities twice a year, in May and November. However, it has chosen to share the list of vulnerabilities in January because of the large number and severity of the situation.

AMD has gained market share from Intel and is known for having fever vulnerabilities compared to its rivals. Maybe attackers and researchers were more interested in Intel back then due to its more significant market share and have now shifted their attention to AMD in search of security gaps.

AMD has also yet to disclose if these mitigations would have some performance penalty for AMD processors, as seen previously.

AMD has been the center of attention this year for many reasons; hopefully, it will be able to address it in time. What are your thoughts regarding the vulnerabilities found on the AMD Ryzen processor lineup?