|
|
Log in / Subscribe / Register

Numerous vulnerabilities in AMD processors

Numerous vulnerabilities in AMD processors

Posted Mar 14, 2018 4:54 UTC (Wed) by luto (subscriber, #39314)
In reply to: Numerous vulnerabilities in AMD processors by CodeAsm
Parent article: Numerous vulnerabilities in AMD processors

> 1) MASTERKEY: if you allow unauthorised BIOS updates you are screwed.

Depending on whether whatever AMD's equivalent of Boot Guard is enabled, write access to the BIOS chip shouldn't be exploitable for anything other than a secure boot bypass and control over CPL0 and up. MASTERKEY (if the vulnerability is for real) gives SMM privilege. The degree to which this is a problem is admittedly rather dubious.

> 2) RYZENFALL: again, loading unauthorised code on the Secure Processor as admin. Threat level: No shit, Sherlock!

I disagree. The whole point of the PSP is that it should *not* be tamperable with as admin. This allows whatever TPM-like features it emulates to be compromised, SEV to be compromised, etc. OTOH, SEV is thoroughly insecure be design anyway, at least in current revisions.

I personally have no idea why MS and other users consider an emulated TPM to be a TPM at all for purposes of MS/Windows logo requirements, etc.


to post comments


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds