Millions of AMD PCs affected by new CPU driver flaw need to be patched ASAP

techspot.com

30 pointsCrankyBear3 comments

Am I missing something, or is this article making a big fuss out of a relatively mundane privilege escalation? "MILLIONS AFFECTED, PATCH ASAP!" If you already have access to the machine, you can read physical memory and break KASLR.

Yay. Any news about updates on the Linux front?

I saw Ubuntu had a new version of Linux-firmware posted since last time I updated, but I’m not continuously updating so I’m not sure if that’s this thing or something else entirely.

It's not a bug in the PSP itself, it's a bug in the Windows driver for it. According to the security bulletin [0], it's due to a misconfiguration of DACLs (which is Windows specific), so I don't think it affects Linux users.

[0] https://www.amd.com/en/corporate/product-security/bulletin/a...

Reply on news.ycombinator.com