… Coordination between Intel security researchers, TCG, and AMD ensured a timely response, as these vulnerabilities could allow attackers to gain escalated system privileges and compromise security enclaves, especially on hardware that is vital to modern system security. …
QEMU patch from AMD engineer confirms Zen 6 Epyc-Venice CPU details, including a fix for a long-standing security flaw
… The AMD security bulletin with the details on this FP-DSS/FPDSS security vulnerability can be found via AMD.com . …
… Patches have still not been released, but mitigations are available. SAP released the May security updates , which include fixes for one high-severity and two Critical flaws. vm2 released security updates for a critical vulnerability in the popular Node.js sandboxing library. …
… Linux Accidentally Left Legacy I/O & Memory Handlers Open In Kernel Lockdown Mode Qualcomm QCE Driver On The Chopping Block With ~48x Slower Than Armv8 Crypto Extensions ML-KEM + X-Wing Patches Posted For Linux To Help With Post-Quantum Security Linux AF ALG Crypto Code Removing Zero-Copy Support O…
AMD has denied a security researcher a $10,000 bug bounty despite the individual's work and cooperation with the company. …
… AMD also acknowledged new security research of TDXRay as a side-channel analysis of Intel TDX. AMD's SEV-SNP though isn't impacted by TDXRay. More details on today's AMD disclosures can be found via the AMD product security center . …
… The latter is the official source code provided to chip makers and software developers to use as a blueprint and simulator for hardware-based security. In other words, this vulnerability could send malicious commands to a TPM 2.0 device to bypass its security. …
… The patches in their current form support RMPOPT optimizations for servers with up to 2TB of memory while future patches will aim to elevate that threshold further. …
… Hopefully, we will see other vendors releasing their latest patches soon as well. …