https://www.techspot.com/news/91322-millions-amd-pcs-affected-new-cpu-flaw-need.html * User iconLogin _ * A search icon The word TechSpot * Trending + Anatomy of Hardware + Gone But Not Forgotten + AMD Ryzen + FreeSync and G-Sync + PC Buying Guide + GeForce vs Radeon * Features + Tech Culture + Must Reads + Hardware + Software + Gaming + Tips & Tricks * Reviews + CPU + Graphics Cards + Laptops + Storage + Monitors + More Reviews * The Best + Best CPUs + Best Phones + Best SSD + Best Monitors + Best Routers + Best VR + Best PC Games * Downloads + Latest Updates + Popular Apps + Software We Recommend + Drivers * Video * Product Finder Search [ ] * Forums + Join TechSpot Elite + New Posts + Latest Comments * Security * Hardware * amd * vulnerability Millions of AMD PCs affected by new CPU driver flaw need to be patched ASAP Attackers can easily steal passwords and encryption keys from system memory By Adrian Potoroaca September 20, 2021, 8:27 36 comments Millions of AMD PCs affected by new CPU driver flaw need to be patched ASAP In brief: After finding several security flaws in Intel's System Guard Extensions (SGX), security researchers have now revealed a flaw in AMD's Platform Security Processor (PSP) chipset driver that makes it easy for attackers to seal sensitive data from Ryzen-powered systems. On the upside, there's already patches available from both Microsoft and AMD to shut the exploit. Recently, AMD disclosed a vulnerability in the AMD Platform Security Processor (PSP) chipset driver that allows malicious actors to dump memory pages and exact sensitive information such as passwords and storage decryption keys. The flaw is tracked under CVE-2021-26333 and is considered medium severity. It affects a wide range of AMD-powered systems, with all Ryzen desktop, mobile, and workstation CPUs being affected. Additionally, PCs equipped with a 6th and 7th generation AMD A-series APU or modern Athlon processors are vulnerable to the same attack. [svg] Security researcher Kyriakos Economou over at ZeroPeril discovered the flaw back in April. His team tested a proof-of-concept exploit on several AMD systems and found it relatively easy to leak several gigabytes of uninitialized physical memory pages when logged in as a user with low privileges. At the same time, this attack method can bypass exploitation mitigations like kernel address space layout randomization (KASLR). The good news is there are patches available for this flaw. One way to ensure you get them is to download the latest AMD chipset drivers from TechSpot Drivers page or AMD's own website. The driver was released a month ago, but at the time AMD chose not to fully disclose the security fixes contained in the release. Another way to ensure your system is patched against this issue is to install Microsoft's latest Patch Tuesday update. Before you do so, however, keep in mind that it will likely break network printing. For an in-depth read about the security flaw discovered by Kyriakos Economou, take a look here. 36 comments 1,204 interactions Share this article: Related Reads * AMD Ryzen 5000 series Threadripper possibly delayed to next year * A new Apple Pay flaw allows hackers to steal money from your locked iPhone * AMD wants to make its chips 30 times more energy-efficient by 2025 VIDEO: 10 Games to Relax and Lower Your Stress Now Read This... * Even faster SSDs on the way: Phison PCIe 5.0 NAND controller shown off * Gaming PCs to become more expensive while monitors drop in price as markets grow Most Read * 25 comments New Android trojan malware has infected more than 10 million Android devices * 55 comments 9 Years of AMD CPUs: From AMD FX to Ryzen 5000 Series, Tested * 51 comments Google Chrome extensions update could be the end of ad-blockers as we know it * Asus ROG Swift PG32UQ Review: 32-inch 4K 144Hz IPS Gaming Monitor Load Comments 36 ... User Comments: 36 Got something to say? Post a comment Load all comments... Discuss * 14 Why You Should Sign In With Google, Facebook, or Apple * 467 The seductive nature of the Internet [comic] * 7 Where on the internet do you spend the most time? * 11 How to increase my blog rank * 26 Facebook doesn't work in browsers but does in android app * Recently commented stories * Jump to forum mode Add your comment to this article You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate. TechSpot Account Sign up for free, it takes 30 seconds. Already have an account? Login now. Main Sections * Tech News * Features * Reviews * The Best * Downloads * Drivers * Tech Trivia * Product Finder Top Resources * GPU Availability and Pricing Update * 25 Games to Play on Laptops & Budget PCs * Ransomware Explained * The Best Chromebooks * Display Tech: TN vs VA vs IPS * GeForce RTX 3060 Laptop GPU * How to Find Your Windows Product Key * microSD and SD Card Buying Guide * GeForce vs Radeon * The Best Laptops Popular Downloads * MSI Afterburner * Minecraft * DS4Windows * Cinebench * SpeedFan | Core Temp * iTunes Download * Windows Media Creation Tool * Valorant * Roblox Download * Windows 11 Compatibility Tool Subscribe to the TechSpot Newsletter [ ] [Subscribe] Follow TechSpot * * * * * TECHSPOT : Tech Enthusiasts, Power Users, Gamers TechSpot is a registered trademark. About Us Ethics Statement Terms of Use Privacy Policy Change Ad Consent Advertise (c) 2021 TechSpot, Inc. All Rights Reserved.