The exploit also allows attackers to get around mitigations like kernel address space layout randomization (KASLR), which protect against attacks that exploit a known address for the kernel.

The attack focuses in the motherboard chipset, so it doesn’t apply if you have an AMD graphics card without an AMD processor (though another security flaw is posing a risk to AMD cards at the moment).Īccording to the report, Economou was able to leak “several gigabytes” of data. The report says that all desktop and mobile Ryzen processors are affected, and AMD has updated its security disclosure since. Originally, AMD listed the vulnerability as only affecting Ryzen 1000 processors. Kyriakos Economou, co-founder of security research firm ZeroPeril, published a report last week that said non-privileged users could exploit the driver to access the sensitive information stored in memory, according to The Record. The PSP works with the operating system to store sensitive information in secured parts of memory, and it’s usually only accessible by administrators.

The vulnerability ( CVE-2021-26333) exists in AMD’s Platform Security Processor (PSP) chipset driver. In a report published last week, cybersecurity researchers disclosed a vulnerability in the driver that would allow attackers to steal sensitive information like passwords, and it impacts all Ryzen processors, as well as several previous AMD generations. Fitbit Versa 3ĪMD released a new chipset driver in August that patched “critical security flaws,” but it didn’t mention which vulnerabilities the patch worked for.

Mini cam driver download